Bridge security review (message passing)

Review a minimal cross-chain message relay for replay, forged-proof, and finality-assumption risks. Report the trust model gaps and how to close them.