/**
 * Assembly detection — scoring heuristics for fragmented payload risk
 *
 * Evaluates whether overlapping entities across memories could combine
 * into a coherent attack payload (e.g., URL + credential = exfiltration).
 */
import type { ExtractedEntity } from './entity-extractor.js';
import type { OverlappingEntity } from './temporal-analyzer.js';
export interface AssemblyAnalysis {
    score: number;
    risk: string;
    suspiciousPatterns: string[];
}
/**
 * Detect whether overlapping entities suggest payload assembly
 */
export declare function detectAssembly(overlapping: OverlappingEntity[], newEntities: ExtractedEntity[]): AssemblyAnalysis;
