declared inputs are pools, not selections

Maintainer decision (the follow-up to the gate-is-legitimacy round), closing the round's first outstanding action. When the agent selects what to present from a larger body of material — a track record, the set of reasons, the options offered, the evidence investigated — the declared input is the pool, and the selection must follow the declared reference: a declared selection rule, or the whole pool where none is declared. The selected subset is never itself a declared input. Selective disclosure is therefore a question of declared-input adequacy, not the content residual: from a declared pool it is tainted by transparency and is a self-checkable deviation, finite-time under deviation_finite; selection by a declared rule counts; selection by anything else under a declared rule is a deviation (GateIsLegitimacy.Consult.Rows.r16, r17; the consultation model's Decl.pool, Decl.rule, canonical). The D.3 split is confirmed for the world channel: shaping the record itself through the world stays asymptotic. Rejected alternatives: the shown record as a declared input unless an obligation is declared (the round's first reading, which let selective disclosure count); selective disclosure as part of the content residual.