/**
 * GCP SEV-SNP leg: go-tpm-tools Attestation. AK cert chains to the Google vTPM
 * root; the SEV report binds sha512(akPub||bound) (anti-splice); the AK-signed
 * TPM2 quote (SHA-256 bank) over PCRs proves PCR 8 (app) + PCR 11 (base).
 * Ports go-tpm-tools quote.Verify + the report_data binding.
 */
import { type SevSnpEnvelope } from '../../../server/utils/sev-snp/verify.ts';
/**
 * Verifies the GCP leg: AK->Google root, SEV report bound to sha512(akPub||bound),
 * AK-signed SHA-256 quote (nonce sha256(bound)) -> PCRs, PCR8 proves the app hash.
 */
export declare function verifyGcpLeg(env: SevSnpEnvelope, bound: Buffer, now: Date): {
    app: string;
    base: string;
};