Function register_gate 

pub fn register_gate(gate: ShellGate) -> bool

Install the policy gate. The first registration wins and is never replaced: returns false when a gate was already registered, so the caller can refuse to start instead of running under a gate it did not install.