[bewaterhere-coder]

Summary

• Reject whitespace-only entries in semantic_rules[].tokens while preserving meaningful spaces inside code tokens.
• Reject leading/trailing whitespace in semantic rule id, plugin_id, and topic fields.
• Add regression tests for blank tokens, padded identity fields, and valid code tokens containing spaces.

Why

A whitespace-only token can match ordinary source lines and produce misleading pattern_observed_control_flow_unverified evidence. Padded identity fields can also silently fail exact matching against plugin IDs and clause/rule references.

Boundaries

• No change to token matching semantics for non-blank literals.
• No API or schema version change.
• Diagnostics remain non-blocking; this validates Profile declarations only.

Validation

Python 3.10–3.13, MCP stdio E2E and Sample Project Advisory.