Module envelope 

Structs

SignedEnvelope

Bridge-signed wrapper around an A2A payload. payload is the already- canonical JSON-serialized A2A JsonRpcRequest; the bridge canonicalizes (sorted keys, no whitespace) BEFORE construction. Verification re-uses these exact bytes — never re-canonicalize on receive.

Enums

EnvelopeError

Functions

sign_payload

Sign a canonical-JSON payload with the bridge’s identity key.

verify_envelope_with_pubkey

Verify the envelope’s signature against an expected pubkey (multibase).