In Phalanx, the evaluator runs on a separate gateway, with a separate model, on isolated infrastructure. It cannot place trades. It grades the others nightly. It reports only to the operator.
This separation is the architectural equivalent of an external auditor — and it's the single most load-bearing piece of the system's credibility.