"So you're anti-LLM for security?" No. I'm anti-lazy-architecture. Let me explain the distinction, because it's the core design decision behind the tool I'm building. The default is to make a model judge everything The common pattern for AI security right now is: for every request, call an LLM and ask "is this malicious?" It feels right because models understand nuance. But making a frontier model judge every single request is like making your staff engineer review every line ...