The MRS runs in 107 ns vs 625 ns for HKDF-SHA256. It's branchless, constant-time, and O(1).

Would love feedback.