benchmark: antfleet two-model review on privashh/shh @Privashhgg findings (unanimous opus 4.7 + gpt-5): → L2ShieldedBridge bridgeWithdraw can retarget L1 recipient → Keypair.pubkey crashes if .init() is forgotten → pathIndices serialization can lose structure / be ambiguous → unbounded queryFilte