Yes that’s perfect. So the multisig does not start until both have committed to paying. Once the exchange begins, neither can back out without losing everything.
Very cool. I have updated KNC to explain this in more detail. Seems like this would be relatively easy to build.