/**
 * DOCAAuditBot -- Automated DORA (Regulation EU 2022/2554) compliance auditing.
 *
 * Covers: ICT risk management (Articles 5-15), digital operational resilience
 * scoring, ICT incident timeline, third-party risk register, business continuity
 * test correlation, threat-led pen test status, and regulator-incident-report
 * generation. Does NOT call external APIs.
 *
 * Narrative writing is delegated to an injectable NarrativeWriter.
 *
 * P2A-08
 *
 * @connexum/ai-governance
 */
import { type AuditRunResult, type AuditRunner } from './scheduler';
export interface NarrativeWriter {
    write(controlId: string, context: string): string;
}
export declare class StubNarrativeWriter implements NarrativeWriter {
    write(controlId: string, context: string): string;
}
export interface DORAConfig {
    logDir: string;
    governanceDir: string;
    narrativeWriter?: NarrativeWriter;
}
export interface DORAGap {
    article: string;
    title: string;
    detail: string;
    mandatoryLevel: 'mandatory' | 'recommended';
}
export declare class DOCAAuditBot implements AuditRunner {
    private logDir;
    private governanceDir;
    private narrativeWriter;
    constructor(config: DORAConfig);
    runAudit(): AuditRunResult;
    private checkICTRiskManagementFramework;
    private checkICTAssetManagement;
    private checkICTSecurityPolicies;
    private checkICTBusinessContinuity;
    private checkICTIncidentManagement;
    private checkICTIncidentClassification;
    private checkICTIncidentReporting;
    private checkBackupRestoration;
    private checkPostIncidentReview;
    private checkThirdPartyRiskRegister;
    private checkCTPPOversight;
    private checkICTTestingProgram;
    private checkTLPTEvidence;
    private checkContractualArrangements;
    private checkEncryptionControls;
    private checkAccessControls;
    analyzeGaps(result: AuditRunResult): DORAGap[];
    generateRegulatorReport(result: AuditRunResult): Record<string, unknown>;
    generateReport(result: AuditRunResult, outputDir: string): string;
}
//# sourceMappingURL=dora.d.ts.map