{"rfc":17,"draft":5,"source_sha256":"cbd15bbb93d1887caea9f5e7e27da7627db0e2dba177886e7ea0d2eecaee1e11","candidate_occurrences":[{"source_locator":"RFC-AI-17:D5:L29:O1","line":29,"token":"MUST","text":"## MUST-DESIGN CRITERIA — CEO-DIRECTED PROPOSED FUTURE SYSTEM","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-17:D5:L30:O1","line":30,"token":"MUST","text":"MUST-17-01: MUST make retries materially different in response to new evidence, diagnosis or recovery action; identical failing retries without changed circumstances are FORBIDDEN.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-17:D5:L30:O2","line":30,"token":"MUST","text":"MUST-17-01: MUST make retries materially different in response to new evidence, diagnosis or recovery action; identical failing retries without changed circumstances are FORBIDDEN.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-17:D5:L31:O1","line":31,"token":"MUST","text":"MUST-17-02: MUST reconcile uncertain committed side effects before executing again, through the responsible Interface.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-17:D5:L31:O2","line":31,"token":"MUST","text":"MUST-17-02: MUST reconcile uncertain committed side effects before executing again, through the responsible Interface.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-17:D5:L32:O1","line":32,"token":"MUST","text":"MUST-17-03: MUST preserve an unfulfilled assignment through crash, timeout, worker replacement or unavailable provider.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-17:D5:L32:O2","line":32,"token":"MUST","text":"MUST-17-03: MUST preserve an unfulfilled assignment through crash, timeout, worker replacement or unavailable provider.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-17:D5:L37:O1","line":37,"token":"MUST","text":"## ADDITIONAL MUST-DESIGN CRITERIA — 2026-11-02 (PROPOSED, NOT IMPLEMENTED)","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-17:D5:L39:O1","line":39,"token":"MUST","text":"MUST: Persist event correlation, assignment owner epoch and work-piece approvals as independent state; do not mistake worker-authored progress for events, and do not replay committed side effects.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-17:D5:L40:O1","line":40,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-17:D5:L40:O2","line":40,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-17:D5:L40:O3","line":40,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-17:D5:L43:O1","line":43,"token":"MUST","text":"REQ-AI-17-LEASE-001: Identity-bound Continuity and current Context MUST survive worker migration independently of current Assignment. Durable assignment ownership MUST have a revisioned epoch/lease; a stale owner MUST fa","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-17:D5:L43:O2","line":43,"token":"MUST","text":"REQ-AI-17-LEASE-001: Identity-bound Continuity and current Context MUST survive worker migration independently of current Assignment. Durable assignment ownership MUST have a revisioned epoch/lease; a stale owner MUST fa","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-17:D5:L43:O3","line":43,"token":"MUST","text":"REQ-AI-17-LEASE-001: Identity-bound Continuity and current Context MUST survive worker migration independently of current Assignment. Durable assignment ownership MUST have a revisioned epoch/lease; a stale owner MUST fa","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-17:D5:L48:O1","line":48,"token":"MUST","text":"REQUIRED FUTURE BEHAVIOR: The future coordination Standard MUST specify durable assignment identity, claim lease, owner epoch, accepted START/RUNTIME evidence, active effect receipt, checkpoint revision and exactly defin","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-17:D5:L48:O2","line":48,"token":"MUST","text":"REQUIRED FUTURE BEHAVIOR: The future coordination Standard MUST specify durable assignment identity, claim lease, owner epoch, accepted START/RUNTIME evidence, active effect receipt, checkpoint revision and exactly defin","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-17:D5:L48:O3","line":48,"token":"MUST","text":"REQUIRED FUTURE BEHAVIOR: The future coordination Standard MUST specify durable assignment identity, claim lease, owner epoch, accepted START/RUNTIME evidence, active effect receipt, checkpoint revision and exactly defin","classification":"UNCLASSIFIED_WORD_OCCURRENCE"}],"status":"DERIVED_WORD_LOCATOR_NOT_NORMATIVE"}