This is great babyblueviper1, and thanks for building it against the real contracts.
Main thing. The mocked caveat on the CAPV half is out of date. The proving path is real now. There’s a Noir allowlist circuit in the repo and a real proof from it verifies on chain through consume, no MockVerifier in the path. Swapping your MockVerifier for the HonkVerifierAdapter is the only change, and ConsumeReal.t.sol is the exact template. Once your action’s commitment is a leaf in the allowlist you generate the witness and it works. Happy to pair if you hit friction.
Your complementary guarantees framing is right, keep it. CAPV proves the action was permitted against some secret policy, and the nullifier stops replay. Your side proves the verdict text is authentic and untouched. A consumer who wants both needs both.
The retyping issue is the good kind to leave in. A signed record only stays checkable if nothing touches the bytes in between.