/** Validate the journal-owned destination-sibling stage basename. */
export declare function assertSafeStageBasename(value: string): void;
/** Prove that a source symlink and its canonical target remain inside the source root. */
export declare function assertSafeSourceSymlink(root: string, path: string, expectedTarget: string): void;
/** Prove one materialized source/destination path remains under its selected root. */
export declare function runtimeStagePathIsContained(root: string, path: string): boolean;
//# sourceMappingURL=runtime-stage-path-policy.d.ts.map