// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
/**
 * Signed, content-addressed policy-bundle primitive. Public surface.
 *
 * Format and verifier only. No registry, no resolver service, no lockfile
 * service, no transparency-log backend. Those are gateway product and live
 * outside this SDK.
 *
 * See ./bundle.ts for the proof box: what a valid bundle proves and what it
 * does NOT prove.
 */
export { createPolicyBundle, verifyPolicyBundle, manifestHash, defaultPolicyBundleScope, serializePolicyBundle, parsePolicyBundle, bundleTarBytes, } from './bundle.js';
export { packTar, unpackTar } from './tar.js';
//# sourceMappingURL=index.js.map