import { type VercelImagePin } from './image.js';
export declare function assertReleaseProvenanceMatches(pin: VercelImagePin, provenanceRaw: string): void;
/**
 * Validate the emitted pin before a package release is allowed.
 *
 * The pin is a build output, so a checkout has none: this gate is what stops a
 * release being cut without the smoke evidence that produced a digest.
 */
export declare function validateReleaseImagePin(): VercelImagePin;