/** Terminal reason recorded on the aborted runs; the client shows it as a stopped run. */
export declare const PRINCIPAL_SUSPENDED_ABORT_REASON = "principal-suspended";
export interface ContainmentResult {
    abortedRuns: number;
    /** One entry per run that could not be confirmed stopped. Empty means contained. */
    containmentErrors: string[];
}
export declare function prepareServicePrincipalContainment(): Promise<void>;
export declare function containServicePrincipal(orgId: string, serviceName: string, reason?: string): Promise<ContainmentResult>;