TOMOYO assumes that "one character" equals to "one byte"
since TOMOYO doesn't consider encoding.
According to your definition of "character" (i.e. it may be multibyte),
TOMOYO doesn't implement "match one character" pattern.
TOMOYO implements "match one byte" pattern.
Thanks.
-