[ethresear.ch] [Security] ERC draft: Independent Simulation Result for (STVA)

An offline signer still needs a trusted commitment point: a canonical block header, finalized checkpoint, or an authenticated state root.

The witness is then proof that the relevant pre-state is part of that commitment.

The signer verifies the witness, executes locally, and only accepts if the transition is consistent.

So the trust model is not trust the server for the whole simulation, it’s trust a minimal canonical root and verify the specific state data it provides.