/**
 * STRICT_PII_DETECTOR — ultra-conservative, opt-in PIIDetector.
 *
 * Detects:
 *   - Email addresses (RFC 5321 — local-part + domain + TLD ≥ 2 chars)
 *   - IBANs (ISO 13616 — country code + check digits mod-97 + BBAN)
 *
 * Intentionally NOT detecting:
 *   - Phone numbers: catastrophic false-positive rate on amounts and IDs.
 *   - SSN / NSS: locale-dependent patterns with high FP on numeric sequences.
 *
 * Activation:
 *   This detector is NEVER activated by defaultPolicy() (R8-I3).
 *   Opt in explicitly:
 *     { kind: 'redact', piiFields: ['email'], piiDetector: STRICT_PII_DETECTOR }
 *
 * @module trace/strict-pii-detector
 */
import type { PIIDetector } from "./policy.js";
/**
 * Ultra-conservative PII detector for strings.
 * Returns true only for values that match email or IBAN patterns with checksum.
 *
 * Note: operates on leaves of the value tree only (non-string values → false).
 * The redaction logic in policy.ts handles recursive traversal.
 */
export declare const STRICT_PII_DETECTOR: PIIDetector;
//# sourceMappingURL=strict-pii-detector.d.ts.map