/**
 * CVF-US-016 — Model identity extraction + verification.
 *
 * Model identity is an orthogonal axis to PoH tiers:
 * - PoH (`proof_tier` / `poh_tier`) describes execution provenance.
 * - `model_identity_tier` describes what we can honestly claim about the model identity.
 *
 * This module intentionally fail-closes *only* the model identity axis.
 * Receipt signature/binding validity is handled elsewhere.
 */
import type { GatewayReceiptPayload, ModelIdentityTier, SignedEnvelope } from './types.js';
export declare function computeModelIdentityHashB64u(identity: unknown): Promise<string>;
export interface ModelIdentityVerificationResult {
    /** Whether the model identity claim itself verified (schema + hash + consistency). */
    valid: boolean;
    tier: ModelIdentityTier;
    /** Deterministic risk flags (non-normative). */
    risk_flags: string[];
    computed_hash_b64u?: string;
}
/**
 * Verify model identity for a single receipt payload.
 *
 * Returns:
 * - `valid=false` only means model identity cannot be trusted. Receipt may still be cryptographically valid.
 */
export declare function verifyModelIdentityFromReceiptPayload(payload: GatewayReceiptPayload): Promise<ModelIdentityVerificationResult>;
export interface ReceiptVerificationForModelIdentity {
    signature_valid?: boolean;
    binding_valid?: boolean;
    valid?: boolean;
}
/**
 * Compute a single model_identity_tier for a set of receipts.
 *
 * Policy/gating-friendly semantics: the overall tier is the *minimum* tier
 * across all receipts that have signature-valid envelopes.
 */
export declare function computeModelIdentityTierFromReceipts(input: {
    receipts: SignedEnvelope<GatewayReceiptPayload>[];
    receiptResults?: ReceiptVerificationForModelIdentity[] | null;
}): Promise<{
    model_identity_tier: ModelIdentityTier;
    risk_flags: string[];
}>;
//# sourceMappingURL=model-identity.d.ts.map