/**
 * RecourseOS Attestation Protocol
 *
 * Cryptographic attestation layer for agent decisions.
 * Implements the protocol specified in docs/attestation-protocol-design.html.
 *
 * Current Limitations:
 * - Attestations are stored in memory only and lost on server restart.
 *   For production audit trails, implement persistent storage.
 * - Single-instance design; no built-in replication or clustering.
 *
 * @module attestation
 */
export { canonicalize, isCanonical, parseAndCanonicalize, CanonicalizeError, } from './canonicalize.js';
export { KeyState, KeyMetadata, KeyRegistry, TransitionResult, CacheEntry, createKey, isValidTransition, transitionKey, activateKey, deprecateKey, retireKey, compromiseKey, canSign, canVerify, getActiveKey, getKeyById, createRegistry, addKeyToRegistry, updateKeyInRegistry, RegistryCache, rotateKey, completeRotation, } from './key-management.js';
export { AttestationSigningError, AttestationContent, Attestation, generateKeyPair, base64urlEncode, base64urlDecode, deriveAttestationId, constructAttestationUri, constructSignedPayload, signAttestation, verifyAttestation, verifyAttestationId, createAttestation, VerificationResult, } from './signing.js';
export { AttestationService, AttestationServiceConfig, getAttestationService, resetAttestationService, } from './service.js';
//# sourceMappingURL=index.d.ts.map