/**
 * Validates allowlist rules include RBAC scoping when strict mode is enabled.
 */
import type { PolicyConfig } from './policy-types.js';
export declare function isStrictAllowlistRbac(): boolean;
export declare function validateAllowlistRbac(config: PolicyConfig): void;
//# sourceMappingURL=policy-allowlist-guard.d.ts.map