/** A private release adapter supplies a reviewed registry artifact identity;
 * the normal CLI binds to its own installed entrypoint instead. */
export interface ReviewedSkillsCli {
    path: string;
    version: string;
    sha256: string;
}
/** Read an unchanged journal binding as evidence, never as executable recovery
 * code. The caller separately binds and verifies the running recovery package. */
export declare function inspectRecordedSkillsCli(command: string, expected: unknown): {
    receipt: {
        path: string;
        version: string;
        sha256: string;
        manifestSha256: string;
    };
    recheck(): void;
};
export declare function bindSkillsCli(command: string, reviewed?: ReviewedSkillsCli): {
    receipt: {
        path: string;
        version: string;
        sha256: string;
        manifestSha256: string;
    };
    recheck(): void;
};