{"rfc":36,"draft":8,"source_sha256":"28fa3b932b049b031dba5d7e23cc13889f85c65b8aaf6ad8cd1f847ab01fd577","candidate_occurrences":[{"source_locator":"RFC-AI-36:D8:L13:O1","line":13,"token":"MUST NOT","text":"1.1 HUMAN_SESSION_MACHINE: current machine associated with an authenticated human client session, only if verified/available. WORKER_EXECUTION_ENVIRONMENT: actual browser/API/runtime service hosting the worker instance. ","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-36:D8:L30:O1","line":30,"token":"MUST NOT","text":"3.4 Normal privileged operations require complete RFC-AI 32 mediation across every actual entry route; an optional prior human exception must still be explicit, scoped and attributable. A context record MUST NOT authoriz","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-36:D8:L69:O1","line":69,"token":"MUST","text":"## MUST-DESIGN CRITERIA — CEO-DIRECTED PROPOSED FUTURE SYSTEM","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-36:D8:L70:O1","line":70,"token":"MUST","text":"MUST-36-01: MUST use GetUTCDateNow() to timestamp context and establish freshness, not direct clock readings; when clock trust is unknown, do not invent freshness.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-36:D8:L70:O2","line":70,"token":"MUST","text":"MUST-36-01: MUST use GetUTCDateNow() to timestamp context and establish freshness, not direct clock readings; when clock trust is unknown, do not invent freshness.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-36:D8:L71:O1","line":71,"token":"MUST","text":"MUST-36-02: MUST separate authenticated human machine, worker execution host and intended target OS/shell/privilege details, validating real capability before operations.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-36:D8:L71:O2","line":71,"token":"MUST","text":"MUST-36-02: MUST separate authenticated human machine, worker execution host and intended target OS/shell/privilege details, validating real capability before operations.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-36:D8:L76:O1","line":76,"token":"MUST","text":"## ADDITIONAL MUST-DESIGN CRITERIA — 2026-11-02 (PROPOSED, NOT IMPLEMENTED)","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-36:D8:L78:O1","line":78,"token":"MUST","text":"MUST: GetWorkerContext(worker_id, assignment_id) is defined by RFC-AI 44. The assignment, not assumed chat location, identifies target machine(s); execution host and user device are distinct. Feed tools, environment, cur","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-36:D8:L79:O1","line":79,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-36:D8:L79:O2","line":79,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-36:D8:L79:O3","line":79,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-36:D8:L82:O1","line":82,"token":"MUST","text":"CTX1 A worker MUST know where it exists in the organizational source tree and current governance edition, and distinguish AI inference runtime, local shell/gateway executor, human workstation and any future target. A tar","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-36:D8:L84:O1","line":84,"token":"MUST","text":"CTX3 Every field MUST identify observed or reported source, collector timestamp, freshness deadline and trust class; absence is UNKNOWN, contradiction CONFLICT. No context assembled by the AI worker itself may self-certi","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-36:D8:L86:O1","line":86,"token":"MUST","text":"CTX5 Cross-worker and private CEO environment information MUST be filtered at source ACLs. A worker MUST NOT infer the user's precise active machine from its own execution host.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-36:D8:L86:O2","line":86,"token":"MUST NOT","text":"CTX5 Cross-worker and private CEO environment information MUST be filtered at source ACLs. A worker MUST NOT infer the user's precise active machine from its own execution host.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"}],"status":"DERIVED_WORD_LOCATOR_NOT_NORMATIVE"}