[bug] rewrite_segment() fails to match path-prefixed commands and fixing it naively risks wrong-binary execution