export type InjectionSignalType = 'token_spike' | 'skill_behavior' | 'tool_description';
export type InjectionSeverity = 'warning' | 'critical';
export interface InjectionSignal {
    signal_type: InjectionSignalType;
    severity: InjectionSeverity;
    confidence: number;
    summary: string;
    recommendation: string;
    matches: string[];
}
export declare const TOOL_DESC_BLACKLIST: readonly [{
    readonly label: "ignore previous instructions";
    readonly pattern: RegExp;
    readonly weight: 0.35;
}, {
    readonly label: "system override";
    readonly pattern: RegExp;
    readonly weight: 0.32;
}, {
    readonly label: "reveal system prompt";
    readonly pattern: RegExp;
    readonly weight: 0.33;
}, {
    readonly label: "prompt injection";
    readonly pattern: RegExp;
    readonly weight: 0.22;
}, {
    readonly label: "bypass policy";
    readonly pattern: RegExp;
    readonly weight: 0.28;
}, {
    readonly label: "developer message leak";
    readonly pattern: RegExp;
    readonly weight: 0.26;
}];
export declare function detectTokenSpike(baseline: number, current: number, threshold?: number): InjectionSignal | null;
export declare function detectSkillBehaviorShift(baseline: number, current: number, threshold?: number): InjectionSignal | null;
export declare function detectToolDescriptionInjection(description: string): InjectionSignal | null;
export declare function pickInjectionSignal(signals: Array<InjectionSignal | null>): InjectionSignal | null;
export declare function renderInjectionDefenseLine(signal: InjectionSignal | null): string;
//# sourceMappingURL=dimension-6-injection.d.ts.map