Function verify_dpop_proof_stateless 

pub fn verify_dpop_proof_stateless(
    proof: &DpopProof,
    capability: &CapabilityToken,
    expected_tool_server: &str,
    expected_tool_name: &str,
    expected_action_hash: &str,
    config: &DpopConfig,
) -> Result<(), KernelError>

Verify the stateless parts of a DPoP proof against an invocation context.

This validates schema, sender binding, invocation binding, freshness, and signature, but deliberately does not consult or mutate the replay nonce store. Use this only for preview paths that must not burn a nonce before the authoritative invocation. Runtime execution must call verify_dpop_proof.

Arguments

• proof - the signed DPoP proof from the agent
• capability - the capability token being used for this invocation
• expected_tool_server - server_id the kernel expects
• expected_tool_name - tool name the kernel expects
• expected_action_hash - SHA-256 hex of the serialized tool arguments
• config - TTL and clock-skew bounds