You'll notice
Command-name normalization only strips a trailing version number when the result is a known binary, so names like python3 stay intact.
The helper that normalizes command/process names for detection, used in bash-safety and permission logic, used to unconditionally strip trailing version digits (e.g. python3 → python). It now only strips the suffix if the resulting stripped name is in a known-binary allowlist, otherwise it keeps the original name intact.