Viability of a physical air-gap (External SSD + BIOS toggle) for running unsigned kernel drivers / Hypervisor bypass on a gaming laptop?

I am trying to set up an isolated Windows environment to run a hypervisor bypass for Denuvo-based games. This requires disabling Memory Integrity (HVCI) and running unsigned kernel-level drivers.

The Hardware: I’m running an HP OMEN 16 laptop (AMD CPU / NVIDIA RTX 5060).

The Problem: Because I'm on a laptop, a traditional Type-1 hypervisor setup (like Proxmox/KVM) with true PCIe GPU passthrough is essentially a dead end. The IOMMU grouping and the MUX switch make isolating the RTX 5060 incredibly difficult without crashing the host. Hyper-V GPU-P is out of the question because paravirtualization is instantly flagged by Denuvo.

Running these shady ring-0 drivers on my daily driver host OS is a massive security risk that I’m not willing to take.

Instead of fighting with VMs, I’m looking at a dual-boot setup to create a cryptographic/physical air-gap:

1. Keep my primary "Clean OS" on my internal NVMe drive, fully encrypted with BitLocker.
2. Install a secondary "Dirty OS" on an external Thunderbolt/USB-C SSD.
3. Boot into the external SSD to run the bypass and the game with full bare-metal performance.

Does anyone have experience running a setup like this? What are the major blind spots?