[Integration]: Gatekeeper pre-session operator verification

[rosspeili]

Stack

other

Kind

enhancement

Description

Combine physical/biometric Gatekeeper verification before AURA session open with the operator identity trailer from #55.

Gatekeeper verify → identity adapter (gatekeeper ref) → session.open → membrane

• Failure before spine: no session_id, no false audit trail
• Success: identity.bound includes opaque session_ref from Gatekeeper (no biometrics in export)
• Example examples/gatekeeper_session/ — mock verifier for CI + doc path for real Gatekeeper
• Complements #43 draft

Paths, .env vars, or run command (optional)

integrations/gatekeeper/ adapter; env GATEKEEPER_VERIFY_URL or local mock.