The model-agnostic approach is smart. Most teams I know are stuck between "we want AI" and "we can't send data to OpenAI." Being able to plug in local models while keeping the same workflow layer is the right call.

Curious how you handle tool permissions in practice. Is it just a whitelist, or can you scope down to specific rows/fields?