The bridge-audit question I care about is not only “does the transfer work?”
It is: can any alternate path mint, wrap or release more value than entered the system?
That means tracing native value, token value and permit value separately—especially through batches, remainders and upgrade paths. One reused or unchecked value source can break the bridge's accounting model.