import type { CompositionCheckReceipt, CompositionCheckVerificationContext, CompositionCheckVerifyResult } from './types.js';
/**
 * The exact bytes an attestor signs: the domain-separation tag, then strict RFC 8785 JCS
 * of the receipt with its `signature` field removed. Exported so an independent attestor
 * can reproduce the signing convention byte for byte. This is an envelope helper: it does
 * no policy evaluation and carries no detection logic.
 */
export declare function compositionCheckSigningPayload(receipt: Omit<CompositionCheckReceipt, 'signature'> & {
    signature?: string;
}): string;
/**
 * Verify a CompositionCheckReceipt against a caller-supplied trust context. Returns the
 * anchor verdict, the failed checks, the surfaced per-check results, and a corroborated
 * independence flag. It NEVER returns "safe": downstream decides whether the named profiles
 * and the independence class meet its risk bar.
 */
export declare function verifyCompositionCheck(receipt: CompositionCheckReceipt, ctx: CompositionCheckVerificationContext): CompositionCheckVerifyResult;
//# sourceMappingURL=verify.d.ts.map