/**
 * WAW056: SCP Guardrail Denies Nothing
 *
 * Flags SERVICE_CONTROL_POLICY resources whose document contains no Deny
 * statement. SCPs never grant permissions — they only filter — so an SCP
 * without a Deny is a no-op guardrail: the posture it appears to declare
 * does not exist.
 */
import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
export declare function checkScpDeniesNothing(ctx: PostSynthContext): PostSynthDiagnostic[];
export declare const waw056: PostSynthCheck;
//# sourceMappingURL=waw056.d.ts.map