[ethresear.ch] [Security] ERC draft: Independent Simulation Result for (STVA)

Is the idea that the signing device would have an EVM execution engine and you would provide it with a witness (merkle proven pre-execution-state) and then it can fully execute the transaction against that witness?

How does the signing device anchor its trust of the witness to something concrete (like a recent block hash)?