Module native
Expand description
The native provider: authenticates the existing gateway pairing
bearer token as the shared operator, over the ONE live pairing
authority.
The wrapped PairingGuard is the same instance the gateway uses for
/pair, rotation, and revocation (its token set is shared interior
state), so pairing a new device or revoking a token affects RPC
authentication immediately — there is no boot-time token snapshot.
Verification uses the guard’s strict membership check: an empty token
set denies everything regardless of the gateway’s require_pairing
convenience setting.
A pairing token attests “trusted operator”, not a distinct per-user identity, so success maps to the shared-operator sentinel.