import type { ConstraintEvaluator, DelegationCert, VerifierContext } from "./types.js";
/**
 * Run every Constraint on cert against the caller-supplied VerifierContext.
 * Returns null iff all pass; an error string otherwise.
 * Fail-closed: an unknown Type or a constraint whose required context field
 * is absent causes rejection. (SPEC §17.7) When a built-in evaluator does
 * not recognize the constraint type, the registry is consulted before
 * failing closed.
 */
export declare function evaluateConstraints(cert: DelegationCert, ctx: VerifierContext, nowSec: number, extEvaluators?: Record<string, ConstraintEvaluator>): Promise<string | null>;
//# sourceMappingURL=constraints.d.ts.map