Why LLM Guardrails Are Failing AI Agents — And How We Built a Deterministic Firewall Instead