v0.3.5

• Fixed: four gate bypasses. The gate asks whether the command word of a segment is a flood tool, so anything that legally precedes that word has to be peeled first — otherwise it inspects a variable assignment and calls it safe. Previously missed: FOO=1 curl …, PATH=/x curl … (assignment prefixes were never peeled), nice -n 5 curl …, timeout 30 curl … (a wrapper's own options were read as the command word), and sudo FOO=1 curl … (the prefix loop capped at two tokens). Prefixes are now peeled as assignment → wrapper → wrapper options → assignment, with seven must-block and six must-allow assertions; two negative controls knock out the assignment peel and the option skip respectively. [a6129be]