/**
 * StateRAMP Compliance Pack
 *
 * StateRAMP is the state government equivalent of FedRAMP. Established
 * by the StateRAMP PMO (non-profit, founded 2021). As of 2026, 20+
 * US states have adopted or are piloting StateRAMP as their cloud
 * security authorisation framework.
 *
 * StateRAMP mirrors NIST SP 800-53 Rev 5 controls with three impact
 * baselines matching FedRAMP:
 *   - Low: 125 controls
 *   - Moderate: 325 controls (most state AI services land here)
 *   - High: 421 controls (critical state infrastructure, criminal justice)
 *
 * Key differences from FedRAMP:
 *   - StateRAMP Authorized List (vs FedRAMP Marketplace): state
 *     procurement officers check StateRAMP status.
 *   - Reciprocity with FedRAMP: FedRAMP-Authorized products receive
 *     StateRAMP Ready status with reduced review requirements.
 *   - State-specific data residency: many adopting states require
 *     data to remain in-state or within the US.
 *   - CJIS-adjacent: criminal justice AI systems in state government
 *     must also comply with CJIS (separate pack: cjis.ts).
 *   - State privacy laws: state AI systems may also be subject to
 *     state privacy laws (CCPA, Colorado AI Act, etc.).
 *
 * AI-specific considerations:
 *   - OMB state-analog guidance on AI: states that have adopted NIST
 *     AI RMF or ISO 42001 as their AI governance standard (and many
 *     have per EO 14110 state-level implementation guidance) layer
 *     those requirements on top of StateRAMP security controls.
 *   - Model provenance: state procurement increasingly requires
 *     software bill of materials (SBOM) for AI systems.
 *   - Continuous monitoring: StateRAMP ConMon is monthly (same as
 *     FedRAMP Moderate).
 *
 * Sovereignty: US State governments. No single federal statute.
 * Adopting states include: TX, OK, CO, AZ, IN, OH, MI, FL, GA and others.
 *
 * OPERATOR_VERIFICATION_REQUIRED (F-NEW-VERA-PACK-C5-03, 2026-05-03):
 * The list of StateRAMP-adopting states changes quarterly as new states
 * join the program. The enumerated states above reflect the StateRAMP PMO
 * published list at time of pack authoring (2026). Operators MUST verify
 * the current list of adopting states directly with the StateRAMP PMO
 * (stateramp.org/authorized) before deployment and before each renewal
 * cycle. StateRAMP authorisation requirements and reciprocity agreements
 * with individual states are also subject to change. Confirm applicability
 * to your specific state procurement context with counsel.
 *
 * @connexum/ai-governance
 */
import { CompliancePack } from './index';
import { CategoryClassifiers } from '../classification/pack-driven-classifier';
/**
 * StateRAMP (State Risk and Authorization Management Program) category classifiers.
 * State-level cloud security framework mirroring FedRAMP for state/local government.
 */
export declare const STATERAMP_CATEGORY_CLASSIFIERS: CategoryClassifiers;
export declare const STATERAMP_PACK: CompliancePack & {
    categoryClassifiers: CategoryClassifiers;
};
//# sourceMappingURL=stateramp.d.ts.map