import type { Policy, PolicyDecision, PolicyRequest } from './types.js';
/**
 * Pure evaluator. Returns Allow, Deny(reason), or ConfirmRequired(summary).
 *
 * The reason string is what the caller writes into the audit log and surfaces
 * as the RPC_POLICY_DENIED error message — write it for a human.
 *
 * Order of checks for transactions:
 *   1. strict-mode static deny rules (chain, contract creation, allow_to,
 *      value cap, selector) — an allowed contract creation short-circuits
 *      to a mandatory confirm here
 *   2. require_confirm_above_wei — independent of mode
 *   3. allow
 *
 * Step 2 runs even in permissive mode: if the user wrote a confirm threshold
 * into their TOML, honour it regardless of whether the rest of the file is
 * permissive. Personal_sign and EIP-712 don't carry a `value` field and so
 * never trigger the confirm path; that's tracked as a follow-up.
 */
export declare function evaluate(request: PolicyRequest, policy: Policy): PolicyDecision;
//# sourceMappingURL=evaluate.d.ts.map