I think you will want to use a router that automatically tunnels everything leaving the local network through TOR. And then put in a permanent "everything read-

I think you will want to use a router that automatically tunnels everything leaving the local network through TOR. And then put in a permanent "everything read-only mode" by burning a fuse or something... Can't trust the local machine to tunnel things correctly.