/**
 * Local-only identity graph resolver.
 *
 * Resolves an IdentityGraph into a ResolvedIdentity by:
 * - Verifying each claim's signature before accepting it
 * - Enforcing claim authority (only root, controller, or delegated addresses may issue)
 * - Detecting rotation/revocation
 * - Collecting payment recipients, service endpoints, delegations
 *
 * Security: every SignedIdentityClaim is passed through verifyIdentityClaim before
 * its issuer or content is trusted. Unsigned or tampered claims are silently dropped.
 *
 * Claim authority rules (after signature verification):
 *   A claim is only accepted if its issuer is:
 *     1. The subject's rootAddress
 *     2. The subject's controllerAddress
 *     3. An address holding an active + signature-verified delegates_to claim from the subject
 *   Claims from unauthorized issuers are silently dropped.
 */
import type { IdentityGraph, IdentityResolutionResult, IdentityResolutionOptions } from './types.js';
export declare function resolveIdentityGraph(graph: IdentityGraph, options?: IdentityResolutionOptions): IdentityResolutionResult;