/**
 * Runtime proof variants — web-safety finding confirmation tests
 *
 * Tests for three new proof flows:
 *  1. rls-off-cross-tenant-leak   (tag: cross-tenant / rls-proof)
 *  2. webhook-signature-forgery   (tag: webhook-forgery)
 *  3. csrf-token-replay           (tag: csrf)
 *
 * Each variant is exercised against BOTH a vulnerable and a safe stub endpoint:
 *  - Against the VULNERABLE endpoint: flow FAILS and flowsToFindings emits the
 *    correct severity + category finding.
 *  - Against the SAFE endpoint: flow PASSES and no finding is emitted.
 */
export {};
//# sourceMappingURL=runtime-proof-variants.test.d.ts.map