Separate protected-eval capture from scoring
Protected evaluations are safer when inference capture and scoring are separate processes. The capture admission should contain no label or review paths; it should persist the exact request bytes before transport and seal every raw response or failure for the full preregistered i…