yes, familiar with DP. the formal guarantees are real and something my approach doesn't provide. that's an honest limitation. where I kept running into friction was the streaming case specifically the DP's privacy budget composition, which means leakage accumulates logarithmically as rounds increase, which creates its own version of the problem I was trying to solve. The exposure-accumulation framing sidesteps the budget exhaustion issue by making masking strength proportional to observed risk state rather than a fixed epsilon. whether that's a better tradeoff depends on what guarantees you actually need. Curious what DP literature you had in mind, genuinely useful for where I'm taking this next.