Failing that, complianceware should be restricted to running its non-Turing-complete rules locally rather than routing everything sensitive through one sweet sw

Failing that, complianceware should be restricted to running its non-Turing-complete rules locally rather than routing everything sensitive through one sweet sweet target host.