{"rfc":33,"draft":7,"source_sha256":"218df0a5076a4c4c1e5e1c917a95433dff52ecc30b4f1cf7d6ac3089fd6fb53f","candidate_occurrences":[{"source_locator":"RFC-AI-33:D7:L14:O1","line":14,"token":"MUST","text":"1.1 JSON instance fields are: type (required), provider (required), selector (required), account (required), nickname (optional until assigned), providerUID (optional). A complete registered worker MUST have exactly one ","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L15:O1","line":15,"token":"MUST","text":"1.2 type MUST be \"Chat\" or \"API\" in this draft. Future types require an RFC amendment, not a worker's arbitrary invention. provider is the exact registered provider/service name, for example \"ChatGPT.com\". selector is th","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L15:O2","line":15,"token":"MUST","text":"1.2 type MUST be \"Chat\" or \"API\" in this draft. Future types require an RFC amendment, not a worker's arbitrary invention. provider is the exact registered provider/service name, for example \"ChatGPT.com\". selector is th","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L15:O3","line":15,"token":"MUST","text":"1.2 type MUST be \"Chat\" or \"API\" in this draft. Future types require an RFC amendment, not a worker's arbitrary invention. provider is the exact registered provider/service name, for example \"ChatGPT.com\". selector is th","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L30:O1","line":30,"token":"MUST","text":"2.1 The fixed registration service defines one provider-name catalog and selector catalog, with documented exact spelling. Input aliases (e.g., host capitalization) resolve through an explicitly reviewed mapping; do not ","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L32:O1","line":32,"token":"MUST","text":"2.3 Each tuple MUST have a single registry entry. A second registration with the same tuple returns that same existing entry or a recorded duplicate request; it MUST NOT create a new worker. Distinct selectors intentiona","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L32:O2","line":32,"token":"MUST NOT","text":"2.3 Each tuple MUST have a single registry entry. A second registration with the same tuple returns that same existing entry or a recorded duplicate request; it MUST NOT create a new worker. Distinct selectors intentiona","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L33:O1","line":33,"token":"MUST NOT","text":"2.4 Identity tuple changes (account rename, provider migration, selector reclassification) require an explicitly authorized migration linking old and new tuples, rechecking ownership and permissions, and preserving histo","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L36:O1","line":36,"token":"MUST","text":"3.1 One nickname MUST resolve to exactly one active or reserved worker identity, through a centrally serialized registry. No two active workers may share the same canonical nickname, regardless of provider or selector. W","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L40:O1","line":40,"token":"MUST","text":"3.5 Nickname renames require authorized action, preserve the historical alias mapping without granting the alias to another worker, and do not modify the tuple. Registry commit, collision check and alias/reservation entr","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L44:O1","line":44,"token":"MUST","text":"4.1 Registered identity is not authentication. The framework MUST verify the connecting session using an authorized channel, authenticated account binding and eligible role. providerUID, when available and independently ","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L44:O2","line":44,"token":"MUST NOT","text":"4.1 Registered identity is not authentication. The framework MUST verify the connecting session using an authorized channel, authenticated account binding and eligible role. providerUID, when available and independently ","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L46:O1","line":46,"token":"MUST","text":"4.3 Identity records are private; common training templates and public RFCs MUST use synthetic/example.invalid accounts. Worker contact documents MUST minimize or mask account strings for recipients without a need to kno","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L46:O2","line":46,"token":"MUST","text":"4.3 Identity records are private; common training templates and public RFCs MUST use synthetic/example.invalid accounts. Worker contact documents MUST minimize or mask account strings for recipients without a need to kno","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L52:O1","line":52,"token":"MUST NOT","text":"5.3 LOOKUP_BY_ID requires all four fields. LOOKUP_BY_NICKNAME accepts a unique exact registered nickname and returns a tuple only after caller authorization. RESOLVE_SESSION additionally verifies the actual provider/acco","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L75:O1","line":75,"token":"MUST","text":"CANONICAL CLARIFICATION (CEO): the unique worker ID remains exactly type + provider + selector + account. selector MUST exist and MAY be the empty string \"\"; it is part of identity, but working-mode is an OPTIONAL, non-k","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L88:O1","line":88,"token":"MUST","text":"## MUST-DESIGN CRITERIA — CEO-DIRECTED PROPOSED FUTURE SYSTEM","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L89:O1","line":89,"token":"MUST","text":"MUST-33-UTC: Any current UTC datetime, timestamp, deadline, source-freshness comparison, expiry, or chronological identifier MUST obtain current time through GetUTCDateNow() or its approved typed Time Interface result. A","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L89:O2","line":89,"token":"MUST","text":"MUST-33-UTC: Any current UTC datetime, timestamp, deadline, source-freshness comparison, expiry, or chronological identifier MUST obtain current time through GetUTCDateNow() or its approved typed Time Interface result. A","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L89:O3","line":89,"token":"MUST NOT","text":"MUST-33-UTC: Any current UTC datetime, timestamp, deadline, source-freshness comparison, expiry, or chronological identifier MUST obtain current time through GetUTCDateNow() or its approved typed Time Interface result. A","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L91:O1","line":91,"token":"MUST","text":"MUST-33-01: MUST distinguish the four-part worker identity tuple and nickname from authenticated worker possession; no identity string establishes permission.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L91:O2","line":91,"token":"MUST","text":"MUST-33-01: MUST distinguish the four-part worker identity tuple and nickname from authenticated worker possession; no identity string establishes permission.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L92:O1","line":92,"token":"MUST","text":"MUST-33-02: MUST bind provider/account/selector/actual session through authorized authentication and check current role/resource permissions separately; recovery requires explicit rebind.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L92:O2","line":92,"token":"MUST","text":"MUST-33-02: MUST bind provider/account/selector/actual session through authorized authentication and check current role/resource permissions separately; recovery requires explicit rebind.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L97:O1","line":97,"token":"MUST","text":"## ADDITIONAL MUST-DESIGN CRITERIA — 2026-11-02 (PROPOSED, NOT IMPLEMENTED)","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L99:O1","line":99,"token":"MUST","text":"MUST: Separately verify asserted worker identity, authenticated session, role qualification examination and assignment authority; claimed expertise and nickname never confer privilege.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L100:O1","line":100,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L100:O2","line":100,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L100:O3","line":100,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L103:O1","line":103,"token":"MUST","text":"REQ-AI-33-ID-001: Corporate four-field worker identity, nickname, provider session, execution host, privileged executor, human principal and target machine MUST be separately typed and independently verified. A remembere","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L104:O1","line":104,"token":"MUST NOT","text":"REQ-AI-33-ID-002: Continuity uses current authenticated worker identity, Context uses independent real runtime and machine observations, Assignment comes LAST with authenticated human objective and owner epoch; historica","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L105:O1","line":105,"token":"MUST","text":"REQ-AI-33-ID-003: Credentials, provider entitlements and temporary grants MUST be scoped, expiring, revocable and verified at protected execution, preferably using maintained workload identity mechanisms where appropriat","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L109:O1","line":109,"token":"MUST","text":"REQUIRED FUTURE BEHAVIOR: The future identity Standard MUST type corporate worker ID, provider session/workload, actual tool executor host, user's observed device, selected assignment target, human principal and delegate","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-33:D7:L109:O2","line":109,"token":"MUST","text":"REQUIRED FUTURE BEHAVIOR: The future identity Standard MUST type corporate worker ID, provider session/workload, actual tool executor host, user's observed device, selected assignment target, human principal and delegate","classification":"UNCLASSIFIED_WORD_OCCURRENCE"}],"status":"DERIVED_WORD_LOCATOR_NOT_NORMATIVE"}