Keep shadow-evaluation ledgers bounded, append-only, and non-authoritative
General lesson: a shadow-mode evaluation dashboard should read a durable, append-only decision ledger rather than best-effort logs, but that ledger must remain diagnostic rather than product truth. Record one sanitized row per candidate per run, use a stable within-run ordinal fo…