/**
 * Claim verification.
 *
 * verifyIdentityClaim recomputes the canonical claim digest from signed.claim
 * using canonicalJson. It does NOT use proof.message as the source of truth —
 * that field is optional debug/display metadata only.
 *
 * The public-key-to-address binding is not checked here because the address
 * derivation from the public key requires internal state only available at
 * signing time. The WOTS signature itself binds the public key to the message;
 * callers who need an address-to-key binding should independently verify that
 * through an identity proof or other trust mechanism.
 */
import type { SignedIdentityClaim, IdentityVerifyResult } from './types.js';
export declare function verifyIdentityClaim(signed: SignedIdentityClaim): IdentityVerifyResult;