Really appreciated that you deliberately broke the token to show the FAIL-OPEN row instead of only showing the happy path. For a privacy check like the HR example, fail-open means a Mac Studio reboot quietly lets sensitive requests through, so I'd be tempted to make that one project fail-closed and just block Send for Review with a clear message. How has the 35B-A3B MoE been on latency for the validator step? Keeping the model pinned in memory (no idle unload in LM Studio) seemed to matter a lot for first-request times in my experience.