import type { ISupervisorSecurityPolicy } from './ISupervisorSecurityPolicy';
/**
 * Development security policy - PERMISSIVE, for development/testing ONLY.
 *
 * WARNING: This policy does NOT require capability tokens.
 * DO NOT use in production - use DEFAULT_SECURITY_POLICY instead.
 *
 * @deprecated Use DEFAULT_SECURITY_POLICY for production.
 */
export declare const DEVELOPMENT_SECURITY_POLICY: ISupervisorSecurityPolicy;
/**
 * Default security policy - SECURE, for production use.
 *
 * Vision 27 Section 6.1: "Every message MUST carry a capability token"
 * This policy enforces that requirement.
 *
 * PHASE 1 (Current): Requires capabilities with presence verification.
 * PHASE 2 (Future):  Add cryptographic signature verification.
 * PHASE 3 (Future):  Add full delegation chain verification.
 *
 * "Presence" verification still provides:
 * - Capability token must be present
 * - Token must not be expired
 * - Token must not be revoked
 * - Delegation chain checked for revocation (Mark Miller)
 */
export declare const DEFAULT_SECURITY_POLICY: ISupervisorSecurityPolicy;
/**
 * Strict security policy - alias for DEFAULT_SECURITY_POLICY.
 *
 * @deprecated Use DEFAULT_SECURITY_POLICY directly (it is now secure by default).
 */
export declare const STRICT_SECURITY_POLICY: ISupervisorSecurityPolicy;
/**
 * Create a custom security policy by merging with secure defaults.
 *
 * Vision 27 Section 6.1: "Every message MUST carry a capability token"
 * The base policy is DEFAULT_SECURITY_POLICY which enforces this.
 */
export declare function createSecurityPolicy(overrides: Partial<ISupervisorSecurityPolicy>): ISupervisorSecurityPolicy;
/**
 * Create a development security policy with optional overrides.
 *
 * WARNING: This creates a PERMISSIVE policy. Use only for development/testing.
 */
export declare function createDevelopmentPolicy(overrides?: Partial<ISupervisorSecurityPolicy>): ISupervisorSecurityPolicy;
//# sourceMappingURL=defaults.d.ts.map