Citrea, which has been live on mainnet since January, uses basically the entire BitVM stack to create ~ trustless proof of a valid withdrawal.
https://eprint.iacr.org/2025/776
But then it also lets ...
IIRC the version of BitVM they shipped already had a 1-of-N assumption with relatively small N so it’s not a change in trust model. Even latest BitVM has that but N can be bigger.
11