Crate agent_action_capsule 

Reference verification for the Agent Action Capsule (draft-mih-scitt-agent-action-capsule): the Rust sibling of the Python reference and the Go and TypeScript implementations in action-state-group/agent-action-capsule, checked against the same conformance vectors.

Module	Draft	Go package
canonical	JCS, JSON-DIGEST and capsule_id (§2, §5.1)	go/canonical
registries	profile registries (§12)	go/registries
verify	Class 1 verification, checks 1-9 and the store checks (§6)	go/verify
envelope	Producer Envelope	go/envelope
bundle (feature bundle)	Evidence Bundle v2; strict verification with feature strict	go/bundle
witness (feature strict)	witness receipts in checkpoint.witnesses	(Python witness)
settlement (feature settlement)	two-party settlement records (draft-mih-agent-settlement-records-00)	(Python settlement)

Decode capsules with verify::decode_capsule_json, not serde_json’s own decoder: it keeps each number’s source text (arbitrary_precision) without serde_json’s private number token turning an object into a number.

Modules

canonical

Canonicalization and JSON-DIGEST (draft-mih-scitt-agent-action-capsule, §2, §5.1).

envelope

Producer Envelope verification: a COSE_Sign1 over the raw 32-byte Capsule ID (the draft’s Producer Envelope profile). Port of go/envelope.

registries

The profile registries (§12), parsed from spec/REGISTRY.md. Port of go/registries.

verify

Class 1 verifier (§6). Port of go/verify.