/**
 * Read an own data property without invoking project-owned accessors. Missing,
 * inherited, accessor-backed, revoked, and throwing-descriptor values are
 * treated as absent. JavaScript cannot distinguish a transparent Proxy from
 * its target, so a non-throwing Proxy is governed by the descriptor it reports.
 */
export declare function readOwnDataProperty(value: unknown, key: PropertyKey): unknown;
/**
 * Local-project privileges require an explicit own boolean data property.
 * Every ambiguous runtime value fails closed.
 */
export declare function isExplicitlyLocalProject(value: unknown): boolean;
/**
 * Host-realm project-code execution requires an explicit runtime capability.
 *
 * An explicitly local development project retains the historical capability.
 * Standalone production runtimes can grant the narrower capability without
 * enabling development-only rendering, caching, diagnostics, or HTTP policy.
 * Every ambiguous value fails closed.
 */
export declare function isHostProjectCodeExecutionAllowed(value: unknown): boolean;
/**
 * Read only the narrow host-execution capability. Callers that already
 * snapshotted local-development status can use this without inspecting the
 * same boundary property twice.
 */
export declare function isExplicitHostProjectCodeExecutionAllowed(value: unknown): boolean;
/**
 * Decide whether a surface must refuse to execute tenant project code.
 *
 * Execution is denied only when the runtime is shared *and* its host-owned
 * entrypoint did not grant the host-execution capability. Local development,
 * dedicated single-project runtimes, and operator-granted shared executors all
 * carry the capability. Every ambiguous value fails closed.
 *
 * Every execution surface shares this single predicate so their boundaries
 * cannot drift apart.
 */
export declare function requiresIsolatedProjectRuntime(value: unknown): boolean;
/**
 * Identify a shared multi-project/proxy runtime from host-owned context.
 *
 * This is deliberately independent from `isLocalProject`: a dedicated
 * single-project runtime may use production source while still being allowed
 * to execute that one project's code. Shared runtimes are identified by their
 * hosted-config preparation boundary or an adapter that explicitly reports
 * multi-project mode.
 */
export declare function isSharedProjectRuntime(value: unknown): boolean;
//# sourceMappingURL=project-locality.d.ts.map