Aqua prices a fill onchain. The provider signs the instructions. SwapVM runs them at execution. @OpenZeppelin audited that engine, the Aqua router, and the pegged-swap and concentrated-liquidity instructions that are live.