/** Recursive path/type membership only; source-file hashes bind reviewed bytes. */
export interface DiscoveryDirectory {
    path: string;
    sha256: string | null;
}
/** Read-only capture; callers must review both membership and source bytes. */
export declare function captureDiscoveryDirectories(paths: string[]): DiscoveryDirectory[];
export declare function verifyDiscoveryDirectories(directories: DiscoveryDirectory[]): void;