diff --git a/.github/workflows/runner-protocol-live-evals.yml b/.github/workflows/runner-protocol-live-evals.yml
index eca9ea71bfe..9ee40e8373c 100644
--- a/.github/workflows/runner-protocol-live-evals.yml
+++ b/.github/workflows/runner-protocol-live-evals.yml
@@ -1294,12 +1294,16 @@ jobs:
           fi
           exit "$status"
 
-      - name: Render the same canonical grid from a public-safe evidence projection
+      - name: Project safe run records for reporting
         if: needs.authorize.outputs.accounting_mode == 'legacy' || needs.authorize.outputs.testops_enabled == 'true'
         run: |
           node packages/paperclip-runner/scripts/runner-protocol-eval-campaign.mjs sanitize \
             --runs-root runner-protocol-merged/runs \
             --output runner-protocol-merged/public-runs
+
+      - name: Render the same canonical grid from a public-safe evidence projection
+        if: needs.authorize.outputs.accounting_mode == 'legacy'
+        run: |
           python3 .paperclip-evals/evals/paperclip-runner/tools/eval_program.py report \
             --runs-root runner-protocol-merged/public-runs \
             --output runner-protocol-merged/public-report \
@@ -1312,11 +1316,24 @@ jobs:
       - name: Create the closed TestOps projection inside the report boundary
         if: always() && !cancelled() && needs.authorize.outputs.testops_enabled == 'true' && needs.testops_selection.result == 'success'
         id: testops_projection
+        env:
+          ACCOUNTING_MODE: ${{ needs.authorize.outputs.accounting_mode }}
         run: |
           mkdir -m 700 runner-protocol-testops-projection
-          node packages/paperclip-runner/scripts/runner-protocol-testops.mjs export \
-            runner-protocol-testops-selection/runner-protocol-testops-selection.json \
-            runner-protocol-merged/public-report runner-protocol-testops-projection/results
+          case "$ACCOUNTING_MODE" in
+            controlled)
+              node packages/paperclip-runner/scripts/runner-protocol-testops.mjs export-runs \
+                runner-protocol-testops-selection/runner-protocol-testops-selection.json \
+                runner-protocol-merged/campaign.json runner-protocol-merged/public-runs \
+                runner-protocol-testops-projection/results
+              ;;
+            legacy)
+              node packages/paperclip-runner/scripts/runner-protocol-testops.mjs export \
+                runner-protocol-testops-selection/runner-protocol-testops-selection.json \
+                runner-protocol-merged/public-report runner-protocol-testops-projection/results
+              ;;
+            *) exit 1 ;;
+          esac
 
       - name: Transfer only the closed TestOps results and receipt
         if: always() && steps.testops_projection.outcome == 'success'
diff --git a/packages/paperclip-runner/docs/runner-protocol-live-evals.md b/packages/paperclip-runner/docs/runner-protocol-live-evals.md
index dece4dc0e67..55de332004d 100644
--- a/packages/paperclip-runner/docs/runner-protocol-live-evals.md
+++ b/packages/paperclip-runner/docs/runner-protocol-live-evals.md
@@ -1017,9 +1017,13 @@ A TestOps-triggered job uses its requested selection. Targeted selections retain
 `full-run` launch tag. Full selections use `full-run` and `test-plan-3`.
 
 The report job creates a closed projection of case identities, checks, numeric
-usage and statuses. For controlled mode this happens inside the existing
-private-history boundary; raw attempts, controller evidence and chat reports
-remain there. Only the closed Allure results and receipt cross into the final
+usage and statuses. For controlled mode, `runner-protocol-testops.mjs export-runs`
+reads sanitized structured score/artifact records inside the existing
+private-history boundary. It binds the original grade, complete checks,
+attempt, model, provider and driver before it can emit a pass. Raw attempts,
+controller evidence and canonical chat reports remain private. Controlled
+reporting never invokes the public viewer; legacy publication keeps that path.
+Only the closed Allure results and receipt cross into the final
 protected reporting job. It checks source and attempt identity, uploads one result
 per selected case, and verifies the saved case and status bindings. Missing
 execution/report evidence becomes a broken result. A passing campaign row
diff --git a/packages/paperclip-runner/package.json b/packages/paperclip-runner/package.json
index dff8204861f..6694faf3781 100644
--- a/packages/paperclip-runner/package.json
+++ b/packages/paperclip-runner/package.json
@@ -85,7 +85,7 @@
     "typecheck:browser": "tsc -p tsconfig.browser.json --noEmit",
     "test": "pnpm run test:typescript && pnpm run test:rust",
     "test:typescript": "pnpm run test:typescript:prep && vitest run",
-    "test:typescript:prep": "pnpm run ensure:eval-build-deps && pnpm run build:rust && node ../../scripts/ci-profile/node-test.mjs test/protocol-contract.test.mjs test/acpx-sidecar-contract.test.mjs test/acpx-codex-package-contract.test.mjs test/acpx-model-selection-package-contract.test.mjs test/acpx-message-boundaries-package-contract.test.mjs test/acpx-rich-extensions-package-contract.test.mjs test/acpx-pi-receipt-package-contract.test.mjs test/acpx-response-delivery-package-contract.test.mjs scripts/candidate-provider-pack.test.mjs scripts/materialize-pi-distribution.test.mjs scripts/cursor-provisioner-layout.test.mjs scripts/release-provider-pack.test.mjs scripts/acpx-release-attestations.test.mjs scripts/provider-pack-runtime-tree.test.mjs scripts/aws-agentcore-provisioning.test.mjs scripts/build-verified-provider-entrypoints.test.mjs scripts/local-provider-smoke-environment.test.mjs scripts/materialize-opencode-binary.test.mjs scripts/materialize-kimi-distribution.test.mjs scripts/provision-kimi-package.test.mjs scripts/kimi-metadata-probe.test.mjs scripts/patch-kimi-runtime.test.mjs test/kimi-installed-runtime.test.mjs scripts/installed-package-pack.test.mjs scripts/runner-runtime-dependency-roots.test.mjs scripts/runner-package-executable.test.mjs scripts/stage-runner-provider-node.test.mjs scripts/stage-runner-binary.test.mjs scripts/build-inputs.test.mjs scripts/contracts/contract-fingerprints.test.mjs scripts/provider-pack-executable-shims.test.mjs scripts/controlled-evals/controller.test.mjs scripts/controlled-evals/portable.test.mjs && node --test scripts/build-copilot-distribution.test.mjs scripts/copilot-inner-distribution.test.mjs scripts/copilot-smoke-resources.test.mjs scripts/discover-copilot-acp.test.mjs scripts/materialize-copilot-binary.test.mjs scripts/install-copilot-assets.test.mjs scripts/probe-copilot-acp.test.mjs scripts/qualify-copilot-acp.test.mjs test/acpx-message-boundaries-package-contract.test.mjs",
+    "test:typescript:prep": "pnpm run ensure:eval-build-deps && pnpm run build:rust && node ../../scripts/ci-profile/node-test.mjs test/protocol-contract.test.mjs test/acpx-sidecar-contract.test.mjs test/acpx-codex-package-contract.test.mjs test/acpx-model-selection-package-contract.test.mjs test/acpx-message-boundaries-package-contract.test.mjs test/acpx-rich-extensions-package-contract.test.mjs test/acpx-pi-receipt-package-contract.test.mjs test/acpx-response-delivery-package-contract.test.mjs scripts/candidate-provider-pack.test.mjs scripts/materialize-pi-distribution.test.mjs scripts/cursor-provisioner-layout.test.mjs scripts/release-provider-pack.test.mjs scripts/acpx-release-attestations.test.mjs scripts/provider-pack-runtime-tree.test.mjs scripts/aws-agentcore-provisioning.test.mjs scripts/build-verified-provider-entrypoints.test.mjs scripts/local-provider-smoke-environment.test.mjs scripts/materialize-opencode-binary.test.mjs scripts/materialize-kimi-distribution.test.mjs scripts/provision-kimi-package.test.mjs scripts/kimi-metadata-probe.test.mjs scripts/patch-kimi-runtime.test.mjs test/kimi-installed-runtime.test.mjs scripts/installed-package-pack.test.mjs scripts/runner-runtime-dependency-roots.test.mjs scripts/runner-package-executable.test.mjs scripts/stage-runner-provider-node.test.mjs scripts/stage-runner-binary.test.mjs scripts/build-inputs.test.mjs scripts/contracts/contract-fingerprints.test.mjs scripts/provider-pack-executable-shims.test.mjs scripts/controlled-evals/controller.test.mjs scripts/controlled-evals/portable.test.mjs scripts/runner-protocol-testops.test.mjs scripts/runner-protocol-eval-workflow-security.test.mjs && node --test scripts/build-copilot-distribution.test.mjs scripts/copilot-inner-distribution.test.mjs scripts/copilot-smoke-resources.test.mjs scripts/discover-copilot-acp.test.mjs scripts/materialize-copilot-binary.test.mjs scripts/install-copilot-assets.test.mjs scripts/probe-copilot-acp.test.mjs scripts/qualify-copilot-acp.test.mjs test/acpx-message-boundaries-package-contract.test.mjs",
     "test:typescript:vitest": "node ./scripts/run-pr-vitest-lane.mjs",
     "test:rust": "cargo test --release --manifest-path runner/Cargo.toml --locked --workspace",
     "test:codex": "cargo test --manifest-path runner/Cargo.toml --locked -p paperclip-runner-core --test codex_provider",
diff --git a/packages/paperclip-runner/scripts/runner-protocol-eval-workflow-security.test.mjs b/packages/paperclip-runner/scripts/runner-protocol-eval-workflow-security.test.mjs
index b15dc628f36..dae4647342f 100644
--- a/packages/paperclip-runner/scripts/runner-protocol-eval-workflow-security.test.mjs
+++ b/packages/paperclip-runner/scripts/runner-protocol-eval-workflow-security.test.mjs
@@ -406,6 +406,15 @@ test('TestOps receives only a closed projection created inside the report bounda
   assert.equal(admits(false, true, false), false);
   assert.match(report, /environment:.*runner-e2e-private-history/u);
   assert.match(report, /Create the closed TestOps projection inside the report boundary[\s\S]*runner-protocol-testops\.mjs export/u);
+  const publicGrid = report.slice(report.indexOf('      - name: Render the same canonical grid'), report.indexOf('      - name: Create the closed TestOps projection'));
+  assert.match(publicGrid, /if: needs\.authorize\.outputs\.accounting_mode == 'legacy'/u);
+  assert.doesNotMatch(publicGrid, /testops_enabled|env -u|unset /u);
+  const sanitize = report.slice(report.indexOf('      - name: Project safe run records'), report.indexOf('      - name: Render the same canonical grid'));
+  assert.match(sanitize, /accounting_mode == 'legacy' \|\| needs\.authorize\.outputs\.testops_enabled == 'true'/u);
+  assert.match(sanitize, /runner-protocol-eval-campaign\.mjs sanitize/u);
+  const projection = workflowShell(report, 'Create the closed TestOps projection inside the report boundary');
+  assert.match(projection, /controlled\)[\s\S]*export-runs[\s\S]*campaign\.json runner-protocol-merged\/public-runs/u);
+  assert.match(projection, /legacy\)[\s\S]*export \\[\s\S]*runner-protocol-merged\/public-report/u);
   assert.match(report, /Transfer only the closed TestOps results and receipt[\s\S]*path: runner-protocol-testops-projection\//u);
   assert.match(publisher, /name: runner-protocol-testops-projection-/u);
   assert.doesNotMatch(publisher, /runner-protocol-eval-public-|runner-protocol-merged|private-history|AWS_ACCESS_KEY_ID|BRAINTRUST_API_KEY/u);
diff --git a/packages/paperclip-runner/scripts/runner-protocol-testops.mjs b/packages/paperclip-runner/scripts/runner-protocol-testops.mjs
index 79d37aab983..6f4eedef8bb 100644
--- a/packages/paperclip-runner/scripts/runner-protocol-testops.mjs
+++ b/packages/paperclip-runner/scripts/runner-protocol-testops.mjs
@@ -139,6 +139,15 @@ export function filterCatalog(catalog, selection) {
       caseIds: [...selectedIds], allureJobRunId: selection.allureJobRunId } };
 }
 
+export function payloadFromSanitizedRun(score, artifact, cell) {
+  if (score?.schema !== "paperclip-runner/eval-score/v1" || artifact?.schema !== "paperclip-runner/eval-session-artifact/v1"
+    || score.attemptId !== cell.finalAttemptId || artifact.attemptId !== cell.finalAttemptId || score.caseId !== cell.caseId
+    || typeof score.passed !== "boolean" || artifact.publication?.schema !== "paperclip.runner-protocol-eval.public-chat/v1"
+    || artifact.requestedModel !== contract.model || artifact.provider !== contract.provider || artifact.driver !== contract.driver) fail("sanitized_payload_binding");
+  return { attemptId: score.attemptId, caseId: score.caseId, disposition: score.disposition, passed: score.passed,
+    publication: { schema: artifact.publication.schema }, checks: score.checks };
+}
+
 export function projectResults({ selection, campaign, payloads = new Map() }) {
   validateSelection(selection);
   const campaignUrl = runUrl(selection.runId);
@@ -244,27 +253,36 @@ async function main() {
     await githubOutputs({ matrix_0: JSON.stringify(catalog.matrices[0]), matrix_1: JSON.stringify(catalog.matrices[1]),
       matrix_1_present: String(catalog.matrices[1].include.length > 0), selected: catalog.cells.length });
     console.log(json({ selected: catalog.cells.length, fullPlan: catalog.selection.fullPlan }));
-  } else if (command === "export") {
+  } else if (command === "export" || command === "export-runs") {
+    const structured = command === "export-runs";
+    if (args.length !== (structured ? 4 : 3)) fail("arguments");
     const selection = await readJson(args[0]);
+    const output = args[structured ? 3 : 2];
     let campaign;
-    try { campaign = await readJson(join(args[1], "campaign.json")); } catch (error) { if (error.code !== "ENOENT") throw error; }
+    try { campaign = await readJson(structured ? args[1] : join(args[1], "campaign.json")); } catch (error) { if (error.code !== "ENOENT") throw error; }
     const payloads = new Map();
     for (const row of campaign?.results ?? []) {
       if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,199}$/.test(row.finalAttemptId)) fail("attempt_path");
       try {
-        const html = await readFile(join(args[1], "attempts", row.finalAttemptId, "index.html"), "utf8");
-        const match = /<script type="application\/json" id="paperclip-eval-report">([^<]*)<\/script>/.exec(html);
-        if (!match) fail("public_payload_missing");
-        payloads.set(row.finalAttemptId, JSON.parse(match[1]));
+        if (structured) {
+          const directory = join(args[2], row.finalAttemptId);
+          payloads.set(row.finalAttemptId, payloadFromSanitizedRun(await readJson(join(directory, "score.json")),
+            await readJson(join(directory, "artifact.json")), row));
+        } else {
+          const html = await readFile(join(args[1], "attempts", row.finalAttemptId, "index.html"), "utf8");
+          const match = /<script type="application\/json" id="paperclip-eval-report">([^<]*)<\/script>/.exec(html);
+          if (!match) fail("public_payload_missing");
+          payloads.set(row.finalAttemptId, JSON.parse(match[1]));
+        }
       } catch (error) { if (error.code !== "ENOENT") throw error; }
     }
     const rows = projectResults({ selection, campaign, payloads });
-    await mkdir(args[2], { recursive: false, mode: 0o700 });
+    await mkdir(output, { recursive: false, mode: 0o700 });
     for (const row of rows) {
-      await writeFile(join(args[2], row.file), json(row.result));
-      await writeFile(join(args[2], row.attachment), json(row.evidence));
+      await writeFile(join(output, row.file), json(row.result));
+      await writeFile(join(output, row.attachment), json(row.evidence));
     }
-    await writeFile(`${args[2]}-receipt.json`, json({ selection, results: rows.map(row => ({
+    await writeFile(`${output}-receipt.json`, json({ selection, results: rows.map(row => ({
       testCaseId: Number(row.result.labels[0].value), fullName: row.result.fullName, status: row.result.status })) }));
     console.log(json({ reported: rows.length, passed: rows.filter(row => row.result.status === "passed").length }));
   } else if (command === "verify") {
diff --git a/packages/paperclip-runner/scripts/runner-protocol-testops.test.mjs b/packages/paperclip-runner/scripts/runner-protocol-testops.test.mjs
index cfa240e67b8..31acd4b556d 100644
--- a/packages/paperclip-runner/scripts/runner-protocol-testops.test.mjs
+++ b/packages/paperclip-runner/scripts/runner-protocol-testops.test.mjs
@@ -1,14 +1,94 @@
 import assert from "node:assert/strict";
 import test from "node:test";
+import { mkdtemp, mkdir, readFile, readdir, rm, writeFile } from "node:fs/promises";
+import { spawnSync } from "node:child_process";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
 import { contract, selectCases, inspectSelection, filterCatalog, projectResults, verifyPublication, standingPlanCases, protocolTestOpsFailure,
-  captureManualJobRunContext, parseOfficialJobRunContext } from "./runner-protocol-testops.mjs";
+  captureManualJobRunContext, parseOfficialJobRunContext, payloadFromSanitizedRun } from "./runner-protocol-testops.mjs";
 import { testopsClient } from "../../../tests/runner-e2e/chat-feature-testops-api.mjs";
+import { sanitizeProtocolEvalRuns } from "./runner-protocol-eval-campaign.mjs";
 
 const context = { runId: "123", workflowSha: "a".repeat(40), sourceSha: "a".repeat(40), evalsSha: "b".repeat(40),
   allureJobRunId: "7", jobId: 9, launchId: 11, accountingMode: "legacy" };
 const planned = contract.cases.map(row => ({ id: row.testCaseId, selector: row.fullName }));
 const selection = rows => selectCases(rows, context);
 
+function sanitizedRun() {
+  const expected = contract.cases[0];
+  const cell = { rosterId: contract.rosterId, caseId: expected.caseId, model: contract.model, provider: contract.provider,
+    driver: contract.driver, finalAttemptId: "attempt-1", disposition: "passed", passed: true };
+  const score = { schema: "paperclip-runner/eval-score/v1", attemptId: cell.finalAttemptId, caseId: cell.caseId,
+    disposition: cell.disposition, passed: true, checks: Object.entries(expected.checks).map(([id, kind]) => ({ id, kind, passed: true })) };
+  const artifact = { schema: "paperclip-runner/eval-session-artifact/v1", attemptId: cell.finalAttemptId,
+    requestedModel: contract.model, provider: contract.provider, driver: contract.driver,
+    publication: { schema: "paperclip.runner-protocol-eval.public-chat/v1" }, privateExtra: "PRIVATE-SECRET" };
+  const campaign = { schema: "paperclip.runner-protocol-eval.campaign/v1", source: { paperclip: { sha: context.sourceSha },
+    evals: { sha: context.evalsSha }, workflowRunUrl: "https://github.com/paperclipai/paperclip/actions/runs/123" }, results: [cell] };
+  return { cell, score, artifact, campaign };
+}
+
+test("binds sanitized structured records without reading or forwarding private report content", () => {
+  const { cell, score, artifact, campaign } = sanitizedRun();
+  const input = { selection: selection(planned.slice(0, 1)), campaign,
+    payloads: new Map([[cell.finalAttemptId, payloadFromSanitizedRun(score, artifact, cell)]]) };
+  assert.equal(projectResults(input)[0].result.status, "passed");
+  assert.ok(!JSON.stringify(input.payloads.get(cell.finalAttemptId)).includes("PRIVATE-SECRET"));
+  for (const mutate of [value => { delete value.publication; }, value => { value.requestedModel = "other-model"; },
+    value => { value.provider = "other-provider"; }, value => { value.driver = "other-driver"; },
+    value => { value.attemptId = "other-attempt"; }, value => { value.schema = "raw-private-record"; }]) {
+    const changed = structuredClone(artifact); mutate(changed);
+    assert.throws(() => payloadFromSanitizedRun(score, changed, cell), /sanitized_payload_binding/);
+  }
+  for (const mutate of [value => { value.attemptId = "other-attempt"; }, value => { value.caseId = "other-case"; },
+    value => { value.passed = "true"; }, value => { value.schema = "other-score"; }]) {
+    const changed = structuredClone(score); mutate(changed);
+    assert.throws(() => payloadFromSanitizedRun(changed, artifact, cell), /sanitized_payload_binding/);
+  }
+  for (const change of [checks => checks.pop(), checks => { checks[0].passed = false; }]) {
+    const changed = structuredClone(input); change(changed.payloads.get(cell.finalAttemptId).checks);
+    assert.throws(() => projectResults(changed), /unsupported_pass/);
+  }
+});
+
+test("exports the production sanitizer output as closed TestOps files under a controlled context", async () => {
+  const root = await mkdtemp(join(tmpdir(), "runner-testops-structured-"));
+  try {
+    const { cell, score, artifact, campaign } = sanitizedRun();
+    const run = join(root, "raw-runs", cell.finalAttemptId);
+    await mkdir(run, { recursive: true });
+    delete artifact.publication;
+    artifact.providerSessionId = "PRIVATE-SECRET";
+    for (const [name, data] of [["selection.json", selectCases(planned.slice(0, 1), { ...context, accountingMode: "controlled" })], ["campaign.json", campaign],
+      [`raw-runs/${cell.finalAttemptId}/score.json`, score], [`raw-runs/${cell.finalAttemptId}/artifact.json`, artifact],
+      [`raw-runs/${cell.finalAttemptId}/case.json`, { id: cell.caseId, checks: score.checks }],
+      [`raw-runs/${cell.finalAttemptId}/config.json`, { schema: "paperclip-runner/eval-config/v1", id: "config",
+        model: contract.model, provider: contract.provider, driver: contract.driver }]]) {
+      await writeFile(join(root, name), JSON.stringify(data));
+    }
+    const sanitize = () => sanitizeProtocolEvalRuns({ runsRoot: join(root, "raw-runs"), publicRunsRoot: join(root, "runs") });
+    await sanitize();
+    const execute = output => spawnSync(process.execPath, [fileURLToPath(new URL("./runner-protocol-testops.mjs", import.meta.url)),
+      "export-runs", join(root, "selection.json"), join(root, "campaign.json"), join(root, "runs"), join(root, output)], {
+      encoding: "utf8", env: { PATH: process.env.PATH, PAPERCLIP_RUNNER_EVAL_CONTROL_MANIFEST: "private-manifest" } });
+    const positive = execute("positive");
+    assert.equal(positive.status, 0, positive.stderr);
+    assert.deepEqual(JSON.parse(positive.stdout), { reported: 1, passed: 1 });
+    const files = await readdir(join(root, "positive"));
+    assert.equal(files.length, 2);
+    const values = await Promise.all(files.map(file => readFile(join(root, "positive", file), "utf8")));
+    assert.ok(!values.join("").includes("PRIVATE-SECRET"));
+    assert.equal(JSON.parse(values.find(value => JSON.parse(value).status)).status, "passed");
+    score.checks[0].passed = false;
+    await writeFile(join(run, "score.json"), JSON.stringify(score));
+    await sanitize();
+    const failed = execute("failed");
+    assert.equal(failed.status, 1);
+    assert.match(failed.stderr, /runner_testops_unsupported_pass/);
+  } finally { await rm(root, { recursive: true, force: true }); }
+});
+
 function catalog() {
   const roster = { rosterId: contract.rosterId, model: contract.model, provider: contract.provider,
     driver: contract.driver, cases: contract.cases.map(row => row.caseId) };