{"rfc":21,"draft":4,"source_sha256":"c982e30e5fcc477466ed99ef80ed87e6493937d9054b94487027b0f6e3c205ba","candidate_occurrences":[{"source_locator":"RFC-AI-21:D4:L29:O1","line":29,"token":"MUST","text":"## MUST-DESIGN CRITERIA — CEO-DIRECTED PROPOSED FUTURE SYSTEM","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-21:D4:L30:O1","line":30,"token":"MUST","text":"MUST-21-01: MUST authenticate principal, action, scope, machine and privilege independently; identity, nickname, provider selection and possession of a chat window are not permission.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-21:D4:L30:O2","line":30,"token":"MUST","text":"MUST-21-01: MUST authenticate principal, action, scope, machine and privilege independently; identity, nickname, provider selection and possession of a chat window are not permission.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-21:D4:L31:O1","line":31,"token":"MUST","text":"MUST-21-02: MUST investigate legitimate alternate permitted capabilities when a permission check fails; MUST NOT circumvent, forge or escalate beyond existing authorization.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-21:D4:L31:O2","line":31,"token":"MUST","text":"MUST-21-02: MUST investigate legitimate alternate permitted capabilities when a permission check fails; MUST NOT circumvent, forge or escalate beyond existing authorization.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-21:D4:L31:O3","line":31,"token":"MUST NOT","text":"MUST-21-02: MUST investigate legitimate alternate permitted capabilities when a permission check fails; MUST NOT circumvent, forge or escalate beyond existing authorization.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-21:D4:L36:O1","line":36,"token":"MUST","text":"## ADDITIONAL MUST-DESIGN CRITERIA — 2026-11-02 (PROPOSED, NOT IMPLEMENTED)","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-21:D4:L38:O1","line":38,"token":"MUST","text":"MUST: Recheck present authenticated authority at execution; source provenance, installer/build provenance and current capabilities must be independently verified.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-21:D4:L39:O1","line":39,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-21:D4:L39:O2","line":39,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-21:D4:L39:O3","line":39,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-21:D4:L42:O1","line":42,"token":"MUST NOT","text":"REQ-AI-21-PRIV-001: Worker identity, human-authorized delegation, assignment epoch, exact environment/target and permission are separate facts. GetWorkerContinuity then independent GetWorkerContext then GetWorkerAssignme","classification":"UNCLASSIFIED_WORD_OCCURRENCE"}],"status":"DERIVED_WORD_LOCATOR_NOT_NORMATIVE"}