{"rfc":32,"draft":8,"source_sha256":"52804c95a487906a25ed0456c6c4b417ba6ac55eb93a8ac0dd41032b676b3e62","candidate_occurrences":[{"source_locator":"RFC-AI-32:D8:L25:O1","line":25,"token":"MUST","text":"3.1 Gateway MUST fail closed for protected writes if source identity, authorization, source revision, target, applicable constraints or required evidence cannot be resolved.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L26:O1","line":26,"token":"MUST","text":"3.2 It MUST check forbidden-method rules before issuing an execution permit, including requested no-staging, direct editing, no duplicate, cloud authoritative destination, and explicit website review constraints where ap","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L30:O1","line":30,"token":"MUST NOT","text":"3.6 Gateway MUST NOT infer CEO approval of RFCs, production release or permissions merely from draft text, file comments, worker statements or permit existence.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L37:O1","line":37,"token":"MUST","text":"4.5 The gateway MUST record failed attempts and contradiction between requested and observed results. Immutable or tamper-evident audit evidence requires distinct storage and custody, not a mutable Drive comment alone.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L42:O1","line":42,"token":"MUST","text":"5.2 The gate MUST not rely on only client-side JavaScript or model self-checks; it must be enforced by a trusted server-side authorization boundary with exclusive managed credentials.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L79:O1","line":79,"token":"MUST","text":"11.1 The trusted storage interface, not the AI, MUST implement RFC-AI 38's save/verify handshake for supported canonical files. Validate principal, role, target ID, parent/destination, expected revision, operation, permi","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L82:O1","line":82,"token":"MUST","text":"11.4 Cost controls MUST discourage repetitive full downloads, duplicate source discovery and pointless preflight. Essential security review and targeted readback remain permitted. Validate a successful one-write verified","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L98:O1","line":98,"token":"MUST","text":"## MUST-DESIGN CRITERIA — CEO-DIRECTED PROPOSED FUTURE SYSTEM","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L99:O1","line":99,"token":"MUST","text":"MUST-32-UTC: Any current UTC datetime, timestamp, deadline, source-freshness comparison, expiry, or chronological identifier MUST obtain current time through GetUTCDateNow() or its approved typed Time Interface result. A","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L99:O2","line":99,"token":"MUST","text":"MUST-32-UTC: Any current UTC datetime, timestamp, deadline, source-freshness comparison, expiry, or chronological identifier MUST obtain current time through GetUTCDateNow() or its approved typed Time Interface result. A","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L99:O3","line":99,"token":"MUST NOT","text":"MUST-32-UTC: Any current UTC datetime, timestamp, deadline, source-freshness comparison, expiry, or chronological identifier MUST obtain current time through GetUTCDateNow() or its approved typed Time Interface result. A","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L101:O1","line":101,"token":"MUST","text":"MUST-32-01: MUST combine direct execution-boundary enforcement with later evidence-based investigation and corrective learning; universal enforcement need not be real-time.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L101:O2","line":101,"token":"MUST","text":"MUST-32-01: MUST combine direct execution-boundary enforcement with later evidence-based investigation and corrective learning; universal enforcement need not be real-time.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L102:O1","line":102,"token":"MUST","text":"MUST-32-02: MUST investigate patterns indicating unhealthy/violating behavior even where direct prevention did not trigger and design appropriate future control.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L102:O2","line":102,"token":"MUST","text":"MUST-32-02: MUST investigate patterns indicating unhealthy/violating behavior even where direct prevention did not trigger and design appropriate future control.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L103:O1","line":103,"token":"MUST","text":"MUST-32-03: MUST distinguish worker identity from authenticated session, role and exact authorized operation; the enforcement Interface validates independently.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L103:O2","line":103,"token":"MUST","text":"MUST-32-03: MUST distinguish worker identity from authenticated session, role and exact authorized operation; the enforcement Interface validates independently.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L108:O1","line":108,"token":"MUST","text":"## ADDITIONAL MUST-DESIGN CRITERIA — 2026-11-02 (PROPOSED, NOT IMPLEMENTED)","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L110:O1","line":110,"token":"MUST","text":"MUST: Enforcement MUST consult independently observed recent action evidence; forbid evidence laundering from worker-authored data. At the actual protected boundary, revalidate authorization, assignment revision, worker ","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L110:O2","line":110,"token":"MUST","text":"MUST: Enforcement MUST consult independently observed recent action evidence; forbid evidence laundering from worker-authored data. At the actual protected boundary, revalidate authorization, assignment revision, worker ","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L111:O1","line":111,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L111:O2","line":111,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L111:O3","line":111,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L114:O1","line":114,"token":"MUST","text":"REQ-AI-32-BOUNDARY-001: Every protected effect MUST bind authenticated human principal and delegation, worker session/workload identity, exact typed target and operation, governing source/policy revision, current assignm","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L114:O2","line":114,"token":"MUST NOT","text":"REQ-AI-32-BOUNDARY-001: Every protected effect MUST bind authenticated human principal and delegation, worker session/workload identity, exact typed target and operation, governing source/policy revision, current assignm","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L116:O1","line":116,"token":"MUST","text":"REQ-AI-32-BOUNDARY-003: Privileged recovery MUST be separately authenticated, narrowly scoped, independently logged and revoked when no longer required; remove temporary doas only AFTER tested replacement. A denied route","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L116:O2","line":116,"token":"MUST NOT","text":"REQ-AI-32-BOUNDARY-003: Privileged recovery MUST be separately authenticated, narrowly scoped, independently logged and revoked when no longer required; remove temporary doas only AFTER tested replacement. A denied route","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L117:O1","line":117,"token":"MUST","text":"REQ-AI-32-RECEIPT-004: Effect-boundary rechecks MUST cover current authorization, target, owner epoch, source revision, and independent provider result; a permit alone is not a completed business outcome.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L121:O1","line":121,"token":"MUST","text":"REQUIRED FUTURE BEHAVIOR: A protected operation MUST carry a typed resource class/ID, specific effect, authenticated worker/session/workload principal, authorized human delegation and revision, current assignment owner e","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-32:D8:L121:O2","line":121,"token":"MUST","text":"REQUIRED FUTURE BEHAVIOR: A protected operation MUST carry a typed resource class/ID, specific effect, authenticated worker/session/workload principal, authorized human delegation and revision, current assignment owner e","classification":"UNCLASSIFIED_WORD_OCCURRENCE"}],"status":"DERIVED_WORD_LOCATOR_NOT_NORMATIVE"}