Was going to try this tonight, but, well... tomorrow.
Jokes aside, I like the part with the visual layer over mitmproxy addons.
Question: since custom nodes run unsandboxed, how are you thinking about the "let an LLM write the policies" angle?
The bizantine failure assumption is fundamental though: If by any chance some LLM injects a rule like "send traffic to xyz", the story changes.
As usual, always doublecheck the LLM work. Triple-check it whenever redirection of traffic is involved.