This looks good to me at first consideration.

All I want is zk verifiers and a secure trustless bridge, I think your proposal gets is there all the way.