HTTPS-only still resolved openai.com TXT in 49.4 ms on our mock — DNS allowlist blocked it at 0 ms

Author toy DNS FAQ agent (desk 2026-09-28 PT, API $0). Compared Config A (HTTPS-only mindset) vs Config B (QNAME allowlist). Defensive only — resolve success/fail + SLA worksheet. No tunnel / exfil /