/** Bounded-memory full policy audit. The caller owns the captured archive FD.
 * Only bytes below its locked snapshot boundary are read; normal later appends
 * do not join the audit. Disk scratch is private, disposable, never ledger state.
 */
import { type LedgerVerification, type PolicyState } from '@claude-flow/security/policy/index';
export interface ArchiveSnapshot {
    fd: number;
    size: number;
}
/** Must run under the policy writer lock. O(1), with no whole-file read. */
export declare function captureArchiveSnapshot(file: string): ArchiveSnapshot | undefined;
/** Every physical record is authenticated before deduplication, including
 * unclaimed staging records. The fixed-width index only addresses the bounded
 * snapshot's claimed prefix; arbitrary extra sequence numbers never set sparse
 * file offsets. Exact full canonical equality is checked on duplicate rereads.
 * Scratch I/O is disposable and does not need fsync or mutate the ledger.
 */
export declare function verifyFullPolicyLedger(snapshot: ArchiveSnapshot | undefined, state: PolicyState, engineOptions: {
    signingKey?: string;
    keyId?: string;
}): Promise<LedgerVerification>;
//# sourceMappingURL=policy-ledger-audit.d.ts.map