export interface ExecutionDrift {
    fields: Array<{
        field: string;
        intentValueHash: string;
        executionValueHash: string;
    }>;
    severity: ExecutionDriftSeverity;
    /** True if any drifted field contributes to a signed hash input.
     *  A "benign" drift that changes a hash isn't actually benign.
     *  Source: desiorac on qntm#6 — hash-awareness in drift detection. */
    hashAffected?: boolean;
}
export type ExecutionDriftSeverity = 'none' | 'benign' | 'suspicious' | 'critical';
export type AttestorType = 'sandbox' | 'container' | 'runtime' | 'gateway' | 'orchestrator';
export interface ExecutionAttestation {
    executionId: string;
    agentId: string;
    attestorId: string;
    attestorType: AttestorType;
    toolName: string;
    parameterHash: string;
    resultHash: string;
    policyReceiptId: string;
    executionFrameId: string;
    intentParameterHash: string;
    match: boolean;
    drift: ExecutionDrift;
    executionStartedAt: string;
    executionCompletedAt: string;
    attestedAt: string;
    signature: string;
    trust_context?: {
        score_at_execution: number;
        grade_at_execution: number;
        source: string;
    };
}
export interface ExecutionAttestationVerification {
    valid: boolean;
    signatureValid: boolean;
    receiptBindingValid: boolean;
    parameterMatch: boolean;
    timingValid: boolean;
    drift: ExecutionDrift;
    errors: string[];
}
export interface CreateExecutionAttestationInput {
    agentId: string;
    attestorId: string;
    attestorType: AttestorType;
    toolName: string;
    actualParameters: Record<string, unknown>;
    actualResult: Record<string, unknown>;
    policyReceiptId: string;
    executionFrameId: string;
    intentParameters: Record<string, unknown>;
    executionStartedAt: string;
    executionCompletedAt: string;
    /** Execution context for drift classification (e.g. 'payment', 'search', 'auth') */
    executionContext?: string;
    /** Trust context at execution time (0xbrainkid NVIDIA#682) */
    trust_context?: {
        score_at_execution: number;
        grade_at_execution: number;
        source: string;
    };
    /** Fields that contribute to a signed hash input.
     *  If any drifted field is in this list, drift.hashAffected = true.
     *  Source: desiorac on qntm#6 — "benign" drift that changes a hash isn't benign. */
    hashContributingFields?: string[];
}
export interface DriftClassificationRule {
    field: string;
    context?: string;
    severity: ExecutionDriftSeverity;
    reason: string;
}
export declare const DEFAULT_DRIFT_RULES: DriftClassificationRule[];
//# sourceMappingURL=execution-attestation.d.ts.map