Safe evaluator result APIs require a second public projection
A durable redacted evaluator record should still be treated as untrusted when exposed through a results API. Rebuild the public payload from controlled enums, server-owned rationales, bounded typed references, and allowlisted version identifiers; do not pass through prompts, tran…