/**
 * FedRAMP Compliance Pack
 *
 * Federal Risk and Authorization Management Program. Established by
 * the FedRAMP Act (44 USC 3607), codified via OMB Memorandum M-11-33
 * (2011) and updated by OMB Memorandum M-23-22 (2023) which increased
 * reciprocity requirements and introduced AI-specific guidance.
 *
 * FedRAMP Rev 5 baseline (aligned to NIST SP 800-53 Rev 5) is the
 * current mandatory baseline as of 2024. Three baselines:
 *   - Low: 125 controls
 *   - Moderate: 325 controls (most cloud AI services land here)
 *   - High: 421 controls (national security / high-impact)
 *
 * AI-specific FedRAMP considerations (2023-2024):
 *   - OMB M-24-10 (2024 AI EO implementation): federal agencies must
 *     ensure AI tools they procure are on the FedRAMP Marketplace or
 *     have an equivalent ATO.
 *   - NIST SP 800-53 Rev 5 SA-11, SA-22: software testing and
 *     unsupported system remediation -- applied to AI/ML models.
 *   - SC-28: protection of information at rest (mandatory for AI
 *     training data and model weights).
 *   - AU-2, AU-12: audit events -- AI inference events are loggable
 *     events under FedRAMP.
 *   - AC-2, AC-3, AC-6: account management, access enforcement,
 *     least privilege -- applied to AI agent identities.
 *   - SI-7: software, firmware, and information integrity -- applied
 *     to model integrity (hash verification).
 *   - SR-3, SR-5: supply chain risk management (vendor/model provenance).
 *   - FedRAMP Ready / In-Process / Authorized: three-stage path.
 *   - Continuous Monitoring (ConMon): monthly vulnerability scanning,
 *     annual penetration testing, ongoing POA&M management.
 *
 * Sovereignty: US Federal (agencies and their cloud service providers).
 * StateRAMP is the state-government equivalent (separate pack: stateramp.ts).
 *
 * @connexum/ai-governance
 */
import { CompliancePack } from './index';
import { CategoryClassifiers } from '../classification/pack-driven-classifier';
/**
 * FedRAMP (Federal Risk and Authorization Management Program) category classifiers.
 * Governs cloud services for US federal government: CUI, FCI, PII, classified data.
 * FIPS 140-2/3 validated encryption required for all categories.
 */
export declare const FEDRAMP_CATEGORY_CLASSIFIERS: CategoryClassifiers;
export declare const FEDRAMP_PACK: CompliancePack & {
    categoryClassifiers: CategoryClassifiers;
    subjectKeyedCategories: string[];
};
//# sourceMappingURL=fedramp.d.ts.map