/**
 * @name security/private-key-guard
 * @description Prevents private key material from leaking through SAP MCP tool responses.
 *
 * Scans serialized data for common private key patterns (secret keys, mnemonics,
 * seed phrases) and rejects responses that contain them.
 *
 * @flow
 *   1. Tool handlers call `privateKeyGuard` on response data before returning.
 *   2. If a private key pattern is detected, the response is blocked.
 *
 * @module security/private-key-guard
 */
/**
 * @name privateKeyGuard
 * @description Scans data for potential private key material and returns a safety verdict.
 *
 * @param data — Arbitrary data to scan (will be JSON-stringified for pattern matching).
 * @returns `{ safe: true }` if no private key patterns are found; `{ safe: false, reason }` otherwise.
 *
 * @usedBy Tool handlers across the SAP MCP runtime.
 */
export declare function privateKeyGuard(data: unknown): {
    safe: boolean;
    reason?: string;
};
//# sourceMappingURL=private-key-guard.d.ts.map