subword tokenizers were never causal in the first place, so BPE was peeking at future bytes all along! TIL