I don't trust the LLM to classify my email. So I don't let it.

My classifier calls an LLM on every single email. The LLM is not allowed to classify the email. That sounds like a contradiction. It's the most important design decision in the thing. A reader named @...