in response to your update, wouldn't you actually get

&
[download]

in ASCII/escaped HTML if someone named a subroutine amp?

To check for the above use

/\&(amp;)($1)/
[download]

and you would catch it. Just a quick thought. :)