import type { DaoCoreConfig } from "../config/types.daocore.js";
export type SecurityAuditFinding = {
    checkId: string;
    severity: "info" | "warn" | "critical";
    title: string;
    detail: string;
    remediation?: string;
};
export declare function collectAttackSurfaceSummaryFindings(cfg: DaoCoreConfig): SecurityAuditFinding[];
export declare function collectSmallModelRiskFindings(params: {
    cfg: DaoCoreConfig;
    env: NodeJS.ProcessEnv;
}): SecurityAuditFinding[];
