/**
 * SMI-5838: credential-substitution privilege-escalation severity downgrade
 *
 * Split out of scanner-regression-guard.test.ts (which stayed at exactly the
 * 500-line/file CI gate) rather than growing that file further — see
 * SecurityScanner.scanners.ts's scanPrivilegeEscalation for the implementation.
 *
 * SMI-5833's two credential/auth-level-substitution PRIVILEGE_ESCALATION_PATTERNS
 * entries are purely lexical and can false-positive on benign dev/test
 * troubleshooting text carrying both required signals (e.g. "get around the 403
 * in local testing... mock token instead of your expired token"). Both patterns
 * previously inherited the same critical/high severity as every other
 * privilege_escalation pattern, which blocks a skill install outright
 * (SecurityScanner.ts's `passed` gate: `!hasCritical && !hasHigh`).
 *
 * Fix: these two entries are capped at 'medium' severity by reference
 * (CREDENTIAL_SUBSTITUTION_PATTERNS in patterns.ts) — detection is unchanged, a
 * match still surfaces as a finding for review, it just no longer blocks install.
 *
 * Reference: docs/internal/security/two-scanner-runbook.md
 */
export {};
//# sourceMappingURL=scanner-privesc-severity.test.d.ts.map