import type { Clock, KernelPaths, JournalRecord } from "./types.js";
import { type ExactVerificationResultPayload, type VerificationSubject, type WorktreeProbe } from "./result-stage-parsers.js";
import { type ProcessRunner } from "../providers/process.js";
export { PROTECTED_VERIFIER_AUTHORITY, HARNESS_VERIFIER_AUTHORITY, buildVerificationCheckDigest, buildVerificationEvidenceDigest, parseStepEvidenceExact, parseVerificationSubjectExact, parseWorktreeProbeExact, type VerificationOutcome, type VerificationSubject, type VerificationStepEvidence, type WorktreeProbe, } from "./result-stage-parsers.js";
export interface VerificationResult extends ExactVerificationResultPayload {
    readonly operation_id: string;
}
/**
 * Production protected verification — sealed surface.
 * Accepts only paths, clock, and result-commit operation ID.
 * No final-append callback or mutation API (correction-7A §4).
 */
export declare function runProtectedVerification(paths: KernelPaths, clock: Clock, input: {
    readonly resultCommitOperationId: string;
}): VerificationResult;
/**
 * Require a journaled verification_result produced only by the protected verifier,
 * bound to the exact task/attempt (and optionally commit). Callers cannot mint this
 * provenance through any production export.
 */
export declare function requireProtectedVerificationResult(paths: KernelPaths, runId: string, verificationOperationId: string, bound: {
    readonly taskId: string;
    readonly attempt: number;
    readonly expectedCommit?: string;
    readonly requirePassed?: boolean;
}): JournalRecord;
export declare function probeWorktree(subject: Pick<VerificationSubject, "worktree_path">, runner?: ProcessRunner): WorktreeProbe;
export declare function createKernelVerificationSandbox(worktreeRoot: string, packageRoot: string): import("../verification/sandbox.js").VerificationSandbox;
/** Locate journaled successful verification for task/attempt (tests/adversarial). */
export declare function findPassedVerificationForTask(paths: KernelPaths, runId: string, taskId: string, attempt: number): JournalRecord | null;