fix(api): align claim bounds across runtime snapshots

admin/internal/tasks/tasks.go

@@ -202,6 +202,17 @@ func ValidGoodsID(value string) bool {
 func validBoundedText(value string, maximum int) bool {
 	// RuneCountInString replaces malformed byte sequences with RuneError. Validate first
 	// so corrupt SQLite text cannot consume the code-point budget as if it were legitimate.
-	return utf8.ValidString(value) && value != "" && strings.TrimSpace(value) == value &&
-		utf8.RuneCountInString(value) <= maximum
+	if !utf8.ValidString(value) || value == "" || strings.TrimSpace(value) != value ||
+		utf8.RuneCountInString(value) > maximum {
+		return false
+	}
+	for _, character := range value {
+		// Python str.strip treats these four C0 separators as whitespace while Go
+		// TrimSpace does not. Reject them everywhere so both wire models have one
+		// explicit persisted-text domain instead of runtime-dependent trimming.
+		if character >= '\u001c' && character <= '\u001f' {
+			return false
+		}
+	}
+	return true
 }