/**
 * Memory access control — enforces read/write/delete policies based on trust.
 *
 * Access rules:
 *   Trust ≥ 0.7  → Read all, write direct, delete own
 *   Trust 0.5–0.7 → Read own + non-restricted, write quarantine, delete own
 *   Trust < 0.5  → Read own only, write quarantine, delete none
 *
 * RESTRICTED memories are always blocked below trust 0.7 (credential isolation).
 */
import type { DefenceSource } from '../types.js';
export interface AccessPolicy {
    canRead: boolean;
    canWrite: boolean;
    canDelete: boolean;
    writeRequiresQuarantine: boolean;
    reason: string;
}
/** Minimal memory shape needed for access checks */
export interface AccessCheckMemory {
    id: number;
    source?: string | null;
    sensitivity_level?: string | null;
}
/**
 * Check whether a source has access to a memory for a given operation.
 */
export declare function checkAccess(memory: AccessCheckMemory, source: DefenceSource, operation: 'read' | 'write' | 'delete'): AccessPolicy;
