Locus: Deterministic AST safety firewall for AI agents in pure Rust (<0.05ms)