import type { Check } from "../types.js";
/**
 * Audit and telemetry gap (OWASP MCP08, Lack of Audit and Telemetry).
 *
 * MCP defines no standard per-call audit trail, so a scanner cannot passively
 * confirm whether tool invocations are logged. What it can confirm is exposure:
 * when a server offers high-impact tools (destructive, state-changing,
 * code-executing, or externally-sending), those actions are unattributable
 * after the fact unless the operator adds logging out of band. This is
 * reported as advisory (info, unscored): it flags a gap to verify, not a
 * proven defect.
 */
export declare const telemetryCheck: Check;