/**
 * LLM-based Injection Guard — Pre-verification scanner.
 *
 * Follows Anthropic's "Building Effective Agents" recommendation:
 * "One model instance processes queries while another screens for
 * inappropriate content. This tends to perform better than having
 * the same LLM call handle both."
 *
 * Runs BEFORE the verification pipeline as a separate, cheap LLM call.
 * Does NOT block verification — flags it with injectionWarning.
 */
export interface GuardResult {
    injected: boolean;
    confidence: number;
    evidence: string | null;
    model: string;
    latencyMs: number;
}
/**
 * Run injection guard on input text.
 * Uses a cheap, fast model (Grok, DeepSeek, GPT-4o-mini).
 * Accepts pot-sdk's Provider interface (call-based).
 */
export declare function runGuard(provider: {
    call: (model: string, prompt: string, systemPrompt?: string) => Promise<{
        content: string;
    }>;
}, model: string, input: string): Promise<GuardResult>;
//# sourceMappingURL=guard.d.ts.map