/** * Provenance protocol — thin wrapper delegating to the canonical pure validator. * * Provenance is a cross-cutting protocol that composes with release via * artifact-publish: artifact-publish delegates signing, SBOM generation, and * in-toto attestation chain assembly to provenance (see provenance.md Pipeline * Integration and release-engine.ts releaseShip()). The CI pipeline already * uses `npm publish --provenance` for SLSA L3 keyless attestation via OIDC. * * @task T260 — create the missing provenance protocol wrapper */ import { type ProtocolValidationResult } from '../../orchestration/protocol-validators.js'; interface ProvenanceOpts { strict?: boolean; hasAttestation?: boolean; hasSbom?: boolean; } /** Validate provenance protocol for a task. */ export declare function validateProvenanceTask(taskId: string, opts: ProvenanceOpts): Promise; /** Validate provenance protocol from a manifest file. */ export declare function checkProvenanceManifest(manifestFile: string, opts: ProvenanceOpts): Promise; export {}; //# sourceMappingURL=provenance.d.ts.map