Refuse blank inference verification record references #469

🤖 Generated by the Agentic Engineer

Problem

The offline routing evaluator accepts spaces or a newline as the private verification record reference and reports controls verified. Neither identifies a record.

Reproduced offline against freshly fetched main with a valid control. Inspected guidance and repositories were not executed, and no inference or provider test was launched.

Acceptance criteria

Treat blank/control-only references as unverified; retain meaningful visible opaque and international references; preserve advisory-only output and disabled automatic routing. Add actual CLI regressions. Size: S.

Part of #223.