Smarter command approvals: strict matching and redirection awareness
The "Always Approve" command list is now both stricter and smarter. Previously, partial name matches might slip through, but now the default requires an exact, full-string match unless you explicitly prepend rules with regex: to use regular expressions (a pattern-matching syntax). At the same time, it's less rigid about minor additions: if you just pipe the output of an already-approved command into a file (like command > file), the system will no longer block you simply because you added redirection syntax. Like a building security guard who used to let people in if their badge had any matching words, but now strictly checks the full name — yet won't maliciously stop you just because you're holding a box destined for the warehouse.