- Removes match_text regex that stripped # comments before pattern matching (broke on quoted # inside strings) - allow_patterns now run re.fullmatch against the full lowercased command - deny_patterns search the original lowercased command - Replaces comment-stripping test with comment-tail bypass regression (touch canary # echo allowlisted must be blocked) - Adds Re-bin regression for quoted hash + blocked command (echo "#" followed by blocked command must be caught) - All 10 tests pass Signed-off-by: axelray-dev <110029405+axelray-dev@users.noreply.github.com>