In ctinfo_4layercake_rpi4.qos wouldn't be better to pass ipset rules to dnsmasq as an additional servers file? That way the dhcp file it's clear.
Thanks for your work, i always prefer my own builds but i like to see the work of others so i can tweak my builds better 