Autonomous agents with tool access need real microVM isolation. Open-source runtime firewall + ZK ledger (EctoLedger + EctoClaw)