type SandboxReadBoundaryDenyPathsBuildInput = {
    osHomeDir?: string;
    daycareConfigDir?: string;
};
/**
 * Builds broad read boundary deny paths.
 * Expects: these roots may be bypassed only by explicit read allowlists.
 */
export declare function sandboxReadBoundaryDenyPathsBuild(input?: SandboxReadBoundaryDenyPathsBuildInput): string[];
export {};
//# sourceMappingURL=sandboxReadBoundaryDenyPathsBuild.d.ts.map