"So you're anti-LLM for security?"
No. I'm anti-lazy-architecture. Let me explain the distinction, because it's the core design decision behind the tool I'm building.
The default is to make a model judge everything
The common pattern for AI security right now is: for every request, call an LLM and ask "is this malicious?" It feels right because models understand nuance. But making a frontier model judge every single request is like making your staff engineer review every line of every commit by hand. Expensive, slow, and they burn out by lunch.
Concretely, an LLM-as-judge on the hot path gives you:
