/**
 * Security validation for RLM sandbox execution.
 * Feature #6: Security Sandbox
 *
 * Blocks dangerous APIs and validates code before execution.
 * This is defense-in-depth; isolated-vm provides true isolation.
 */
/**
 * APIs that are blocked from sandbox execution.
 * These are validated via static analysis before code runs.
 */
export declare const BLOCKED_APIS: readonly string[];
/**
 * Security error thrown when code contains prohibited operations.
 */
export declare class SecurityError extends Error {
    readonly violation: string;
    constructor(violation: string, message: string);
}
/**
 * Pre-execution validation of code string.
 * Scans for BLOCKED_APIS patterns and throws SecurityError if found.
 *
 * @param code - JavaScript code to validate
 * @throws SecurityError if code contains blocked patterns
 */
export declare function validateCode(code: string): void;
//# sourceMappingURL=security.d.ts.map