35.0.1 (2026-09-27) Bug Fixes pi-permission-system: check the words after a heredoc against the command's own rules (0a88264), closes #979 pi-permission-system: gate the commands and redirects written after a heredoc (b7b2709), closes #979