Zero-Trust Execution: Sandboxing MCP Data Agents with WebAssembly (medium.com)