export declare const EVIDENCE_RELEASE_TAG = "ztrack-evidence";
/** Upload `filePath` to `repo`'s evidence release and return the download URL + content digest.
 *  Idempotent: re-uploading the same asset name clobbers. Throws (with a clear message) if gh is
 *  unavailable/unauthed or the upload fails. */
export declare function uploadEvidenceToGithub(repo: string, filePath: string, name?: string): {
    url: string;
    sha256: string;
};
/** Fetch a URL-hosted evidence artifact and verify its content matches the pinned digest.
 *  Network — used by `ztrack evidence verify`, NEVER by `check` (the gate stays offline). GitHub
 *  release assets are fetched via the gh CLI so PRIVATE repos work too; everything else over fetch. */
export declare function verifyUrlDigest(url: string, expectedSha256: string): Promise<{
    ok: boolean;
    reason?: string;
}>;