how is this done cost-efficiently? presumably, you'd need to watch every request coming in?

my main worry with updating safeguards is false positives

Another trigger that automatically downgrade to opus4.8 again?