/**
 * #502 review: what `org sign` shows before the operator signs a
 * definition — everything in it that decides what a role may run, reach or
 * be granted, the roles that run with no OS confinement (they can read the
 * operator key and sign anything), and a diff against the projection that
 * was signed last.
 */
/** #502 review round 2: org skills that don't ship with monomind — from the
 *  project's or the user's library. They decide MCP tools the daemon grants
 *  and are not signed by content, so `org sign` and `doctor` list them. */
export declare function nonBundledSkillLines(projectRoot: string): string[];
/** Roles that would run with neither the SDK sandbox nor the bubblewrap
 *  mask on this machine, with why. Such a role's Bash can read the operator
 *  key and so sign any org definition. Mirrors session-run.ts's choice:
 *  full access skips both; the SDK sandbox is for the claude runtime below
 *  `push` with `policy.sandbox.mode` not 'off'; the mask covers the rest on
 *  Linux with a working bubblewrap; the in-process vercel runtime has no
 *  shell at all. */
export declare function unconfinedRoles(raw: unknown, env?: {
    sdkSandbox?: {
        available: boolean;
        reason?: string;
    };
    mask?: {
        available: boolean;
        reason?: string;
    };
}): Array<{
    id: string;
    why: string;
}>;
/** THE enforcement point for unconfined roles, called once per org start
 *  (prepareOrgStart). A role that runs with neither the SDK sandbox nor the
 *  mask can read the operator key and so sign any org definition. Such roles
 *  are allowed by decision (#502): the operator is warned, naming each role
 *  and why it runs without an OS sandbox, and the run continues. */
export declare function enforceConfinement(def: unknown, org: string, warn?: (msg: string) => void): Array<{
    id: string;
    why: string;
}>;
/** The review `org sign` prints: one block per role, then the org-level
 *  settings, then the unconfined roles. */
export declare function describeOrgAuthority(raw: unknown): string[];
/** What changed between the last signed projection and this one, one line
 *  per changed leaf (arrays compare whole). */
export declare function projectionDiff(before: unknown, after: unknown): string[];
//# sourceMappingURL=org-sign-review.d.ts.map