Carry module identity through candidate results

docs/roadmap/implementation.md

@@ -215,6 +215,13 @@ later validation failures retain available module, version, tag, and commit
 evidence. An unrelated sibling worktree change still fails the repository guard.
 Run candidate/facade tests and `go run ./internal/apicheck`.
 
+**Completed:** Added module selection and identity evidence to the facade and
+internal request/result types. Candidate capture now reads the selected
+committed declaration and module-local note, guards the complete local tag, and
+preserves available evidence through callbacks and later failures. Verified
+nested physical-major capture, sibling cleanliness, facade error evidence,
+`go test . ./internal/candidate`, and `go run ./internal/apicheck`.
+
 ## Stage 3: Publish and reconcile the complete selected tag
 
 **Outcome:** Publication addresses one module's exact tag and retains its current