feat(gatekeeper): auth flow (setup, count-before-check, threshold/duress wipe, torn-write-safe resume) over Keystore/Random/Prompt ports; host tests

crates/servers/gatekeeper/src/lib.rs

@@ -1,16 +1,14 @@
+//! The gatekeeper (see the vision's Gatekeeper note): authenticates the
+//! owner before anything that touches user data starts, and hands the
+//! master key over. `flow` is the logic; `run` wires the devices.
+
+#![no_std]
 #![forbid(unsafe_code)]
 
-pub fn add(left: u64, right: u64) -> u64 {
-    left + right
-}
+extern crate alloc;
+
+pub mod flow;
 
 #[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn it_works() {
-        let result = add(2, 2);
-        assert_eq!(result, 4);
-    }
-}
+#[path = "tests/mod.rs"]
+mod tests;