/** * Execution Attestation Verification * CEA-US-010: Verify sandbox execution attestations */ import type { ExecutionAttestationPayload, VerificationResult, VerificationError } from './types.js'; export interface ExecutionAttestationVerifierOptions { /** Allowlisted execution attestation signer DIDs (did:key:...). */ allowlistedSignerDids?: readonly string[]; /** Allowlisted TEE root IDs for tee_execution attestations. */ teeRootAllowlist?: readonly string[]; /** Allowlisted TCB versions for tee_execution attestations. */ teeTcbAllowlist?: readonly string[]; /** Revoked TEE root IDs (denylist). */ teeRootRevoked?: readonly string[]; /** Revoked TCB versions (denylist). */ teeTcbRevoked?: readonly string[]; } export declare function verifyExecutionAttestation(envelope: unknown, options?: ExecutionAttestationVerifierOptions): Promise<{ result: VerificationResult; attestation_id?: string; execution_type?: ExecutionAttestationPayload['execution_type']; agent_did?: string; attester_did?: string; run_id?: string; proof_bundle_hash_b64u?: string; signer_did?: string; allowlisted?: boolean; tee_root_id?: string; tee_tcb_version?: string; error?: VerificationError; }>; //# sourceMappingURL=verify-execution-attestation.d.ts.map