import type { SandboxEnvironment, SandboxIsolationControl, SandboxIsolationReport } from '../types/sandbox/index.js';
export declare function isolationOf(environment: SandboxEnvironment): SandboxIsolationReport;
/** The requested controls this environment cannot supply, in a stable order. */
export declare function missingIsolation(environment: SandboxEnvironment, required: readonly SandboxIsolationControl[]): SandboxIsolationControl[];
/**
 * Refuse when the host cannot supply a control the caller asked for.
 *
 * Refusing is the whole point. A security control that is accepted and
 * then silently not applied is worse than one that was never offered: the
 * caller stops looking, and the turn proceeds believing it is confined.
 */
export declare function assertIsolation(environment: SandboxEnvironment, required: readonly SandboxIsolationControl[]): void;
/** Human-readable summary for logs and error messages. */
export declare function describeIsolation(environment: SandboxEnvironment): string;
//# sourceMappingURL=isolation.d.ts.map