The disclosure gate — an SI's call of a disclosing tool is judged after CP04's interaction gate and before any approval: the run's source ledger, the records the call carries and its basis (which must be what the run read, else BASIS_NOT_READ in ENFORCE) are labelled now and decided with DisclosurePolicy, the verified request as a VERIFIED_REQUEST grant and a held snapshot's releases as OWNER_RELEASE; in ENFORCE the run's other uncleared reading goes to the bounded leak check (LeakPrefilter, Lea...