{"rfc":25,"draft":6,"source_sha256":"400704f49f1b7978ab14c893bb9e5476626b440355e3a278f0c894c6f42ae31f","candidate_occurrences":[{"source_locator":"RFC-AI-25:D6:L29:O1","line":29,"token":"MUST","text":"## MUST-DESIGN CRITERIA — CEO-DIRECTED PROPOSED FUTURE SYSTEM","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-25:D6:L30:O1","line":30,"token":"MUST","text":"MUST-25-01: MUST independently prevent unauthorized secret exposure across worker, browser, storage and log boundaries; simple phrase scrubbing alone cannot demonstrate secrecy.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-25:D6:L30:O2","line":30,"token":"MUST","text":"MUST-25-01: MUST independently prevent unauthorized secret exposure across worker, browser, storage and log boundaries; simple phrase scrubbing alone cannot demonstrate secrecy.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-25:D6:L31:O1","line":31,"token":"MUST","text":"MUST-25-02: MUST minimize shared data and treat legacy content as untrusted input, not a privileged directive.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-25:D6:L31:O2","line":31,"token":"MUST","text":"MUST-25-02: MUST minimize shared data and treat legacy content as untrusted input, not a privileged directive.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-25:D6:L36:O1","line":36,"token":"MUST","text":"## ADDITIONAL MUST-DESIGN CRITERIA — 2026-11-02 (PROPOSED, NOT IMPLEMENTED)","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-25:D6:L38:O1","line":38,"token":"MUST","text":"MUST: Forensics MUST protect secrets, pseudonyms, privacy and collection permissions; independent event logs are not automatically reliable if collection or storage is compromised.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-25:D6:L38:O2","line":38,"token":"MUST","text":"MUST: Forensics MUST protect secrets, pseudonyms, privacy and collection permissions; independent event logs are not automatically reliable if collection or storage is compromised.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-25:D6:L39:O1","line":39,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-25:D6:L39:O2","line":39,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-25:D6:L39:O3","line":39,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-25:D6:L42:O1","line":42,"token":"MUST","text":"REQ-AI-25-PRIV-001: Worker Continuity/Context/Assignment MUST be separately ACL-filtered at source before assembly; no private CEO vault, cross-worker history, API token, signed URL or unrelated human location may appear","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-25:D6:L47:O1","line":47,"token":"MUST","text":"REQUIRED FUTURE BEHAVIOR: A worker or app MUST distinguish contact directory membership, verified contact identity, authenticated other-party device session, permission purpose/precision/duration, current connection and ","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-25:D6:L47:O2","line":47,"token":"MUST NOT","text":"REQUIRED FUTURE BEHAVIOR: A worker or app MUST distinguish contact directory membership, verified contact identity, authenticated other-party device session, permission purpose/precision/duration, current connection and ","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-25:D6:L47:O3","line":47,"token":"MUST NOT","text":"REQUIRED FUTURE BEHAVIOR: A worker or app MUST distinguish contact directory membership, verified contact identity, authenticated other-party device session, permission purpose/precision/duration, current connection and ","classification":"UNCLASSIFIED_WORD_OCCURRENCE"}],"status":"DERIVED_WORD_LOCATOR_NOT_NORMATIVE"}