{"rfc":39,"draft":5,"source_sha256":"249209adfb9a26de6dca5446658e9343187074fe373aa52c25e20c44b2c6afb3","candidate_occurrences":[{"source_locator":"RFC-AI-39:D5:L14:O1","line":14,"token":"MUST","text":"1.1 DOCUMENT_STATUS is DRAFT, ACTIVE or SUPERSEDED, as established only by the authorized governance process. ENFORCEMENT_STATUS is independent and MUST be NOT_IMPLEMENTED, PARTIAL, VERIFIED_WITH_SCOPE, REGRESSED, or NOT","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L15:O1","line":15,"token":"MUST","text":"1.2 No worker, management dashboard, release summary or audit may claim an RFC 'enforced' or 'guaranteed' merely because its text says MUST, the AI promises compliance, a test file exists, or a gateway is alive. An AI se","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L16:O1","line":16,"token":"MUST","text":"1.3 The framework MUST maintain an evidence-linked matrix enumerating each objectively enforceable MUST/MUST NOT, its authority, actual executable control, controlled entry points, covered scope, code version, tests, obs","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L16:O2","line":16,"token":"MUST","text":"1.3 The framework MUST maintain an evidence-linked matrix enumerating each objectively enforceable MUST/MUST NOT, its authority, actual executable control, controlled entry points, covered scope, code version, tests, obs","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L16:O3","line":16,"token":"MUST NOT","text":"1.3 The framework MUST maintain an evidence-linked matrix enumerating each objectively enforceable MUST/MUST NOT, its authority, actual executable control, controlled entry points, covered scope, code version, tests, obs","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L16:O4","line":16,"token":"MUST","text":"1.3 The framework MUST maintain an evidence-linked matrix enumerating each objectively enforceable MUST/MUST NOT, its authority, actual executable control, controlled entry points, covered scope, code version, tests, obs","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L18:O1","line":18,"token":"MUST","text":"1.4 REQUIREMENT TYPES. Each normative obligation MUST be classified as MECHANICAL (objectively decidable by trusted code), EVALUATIVE (quality, reasoning or professional judgment assessed through independent evidence), o","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L20:O1","line":20,"token":"MUST NOT","text":"1.6 One rejected action MUST NOT terminate unrelated authorized work. Deny only the exact unauthorized side effect; preserve task continuity, pursue permitted research, repairs and alternate routes, and escalate only an ","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L21:O1","line":21,"token":"MUST","text":"1.7 Source retirement is operational: obsolete directives or findings MUST be removed from current discovery, authoritative context assembly and active indexes through authenticated source edits; a RETIRED label or a mod","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L21:O2","line":21,"token":"MUST","text":"1.7 Source retirement is operational: obsolete directives or findings MUST be removed from current discovery, authoritative context assembly and active indexes through authenticated source edits; a RETIRED label or a mod","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L25:O1","line":25,"token":"MUST","text":"2.1 An independently executed deterministic control MUST operate at the trusted resource or tool boundary, separate from the worker's generated reasoning. Implement explicit, minimal, testable decision rules in applicati","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L26:O1","line":26,"token":"MUST","text":"2.2 Every protected side effect MUST be covered at its actual entry point, including alternate connectors, native storage APIs, direct shell/administrator routes, browser extensions/helpers, website publication, backgrou","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L26:O2","line":26,"token":"MUST","text":"2.2 Every protected side effect MUST be covered at its actual entry point, including alternate connectors, native storage APIs, direct shell/administrator routes, browser extensions/helpers, website publication, backgrou","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L27:O1","line":27,"token":"MUST","text":"2.3 The control MUST validate authenticated authority, exact target/operation, current applicable policy and required evidence before protected effects; reject stale or mismatched permits; record independently observed o","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L27:O2","line":27,"token":"MUST NOT","text":"2.3 The control MUST validate authenticated authority, exact target/operation, current applicable policy and required evidence before protected effects; reject stale or mismatched permits; record independently observed o","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L28:O1","line":28,"token":"MUST","text":"2.4 Architectures MUST favor ordinary simple logic and existing interfaces; do not create redundant second storage managers, state databases, or arbitrary AI enforcement loops. Storage interface owns file commit, persist","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L28:O2","line":28,"token":"MUST","text":"2.4 Architectures MUST favor ordinary simple logic and existing interfaces; do not create redundant second storage managers, state databases, or arbitrary AI enforcement loops. Storage interface owns file commit, persist","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L28:O3","line":28,"token":"MUST NOT","text":"2.4 Architectures MUST favor ordinary simple logic and existing interfaces; do not create redundant second storage managers, state databases, or arbitrary AI enforcement loops. Storage interface owns file commit, persist","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L28:O4","line":28,"token":"MUST","text":"2.4 Architectures MUST favor ordinary simple logic and existing interfaces; do not create redundant second storage managers, state databases, or arbitrary AI enforcement loops. Storage interface owns file commit, persist","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L31:O1","line":31,"token":"MUST","text":"3.1 Each enforceable obligation MUST have at least one authorized-positive and one prohibited-negative test, independent of the AI's own narrative; boundary coverage, replay, concurrent edit, stale revision, tampering, f","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L32:O1","line":32,"token":"MUST","text":"3.2 Test evidence MUST identify executable revision/hash, policy edition, source/target identity, test invocation, observed output and UTC. A test against mock logic cannot prove a production connector or service is enfo","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L33:O1","line":33,"token":"MUST","text":"3.3 Enforcement evidence MUST be invalidated or marked REGRESSED when relevant control code, permissions, routes, providers, policy editions, or source custody change until targeted tests reestablish coverage. Unavailabl","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L34:O1","line":34,"token":"MUST","text":"3.4 Fail-closed behavior applies to unauthorized protected effects; read-only investigation, reporting and safe recovery need not be indiscriminately blocked. The framework MUST not claim enterprise-wide enforcement when","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L35:O1","line":35,"token":"MUST NOT","text":"3.5 The CEO alone authorizes adoption and release decisions. An automated check may verify technical compliance, but MUST NOT invent an additional CEO failure/release gate or imply production approval.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L38:O1","line":38,"token":"MUST","text":"4.1 An independent enforcement report MUST show RFC number and revision, obligation identifier, document status, enforcement status, real implementation path or service, controlled entry points, uncovered paths, last tes","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L39:O1","line":39,"token":"MUST","text":"4.2 Any discovered uncovered or failing requirement MUST be recorded as a finding, assigned a truthful status, and retained until independently verified fixed or expressly deemed not applicable by authorized review. No '","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L40:O1","line":40,"token":"MUST","text":"4.3 Contact and catalog systems MUST never infer operational enforcement from a catalog listing or RFC description; they MUST expose the verified scope or UNKNOWN to authorized consumers.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L40:O2","line":40,"token":"MUST","text":"4.3 Contact and catalog systems MUST never infer operational enforcement from a catalog listing or RFC description; they MUST expose the verified scope or UNKNOWN to authorized consumers.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L66:O1","line":66,"token":"MUST","text":"## MUST-DESIGN CRITERIA — CEO-DIRECTED PROPOSED FUTURE SYSTEM","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L67:O1","line":67,"token":"MUST","text":"MUST-39-01: MUST evaluate universal enforcement as both direct rules and investigative detection/correction of violations after the fact; do not equate universal with only real-time gate checks.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L67:O2","line":67,"token":"MUST","text":"MUST-39-01: MUST evaluate universal enforcement as both direct rules and investigative detection/correction of violations after the fact; do not equate universal with only real-time gate checks.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L68:O1","line":68,"token":"MUST","text":"MUST-39-02: MUST require empirical independent proof of actual result, not a worker's assertion, and preserve visible prospective status UNIMPLEMENTED for all RFC-AIs until real future implementation evidence exists.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L68:O2","line":68,"token":"MUST","text":"MUST-39-02: MUST require empirical independent proof of actual result, not a worker's assertion, and preserve visible prospective status UNIMPLEMENTED for all RFC-AIs until real future implementation evidence exists.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L69:O1","line":69,"token":"MUST","text":"MUST-39-03: MUST retire erroneous active source content promptly once dependency-free and validly authorized, not conceal it behind later appended text.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L69:O2","line":69,"token":"MUST","text":"MUST-39-03: MUST retire erroneous active source content promptly once dependency-free and validly authorized, not conceal it behind later appended text.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L74:O1","line":74,"token":"MUST","text":"## ADDITIONAL MUST-DESIGN CRITERIA — 2026-11-02 (PROPOSED, NOT IMPLEMENTED)","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L76:O1","line":76,"token":"MUST","text":"MUST: Apply evidence-source trust tiers to every claimed obligation; action-time snapshots of recent forensic records must be independently attributable. A compliant narrative is never evidence of execution. Distinguish ","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L77:O1","line":77,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L77:O2","line":77,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L77:O3","line":77,"token":"MUST","text":"MUST consider the concrete literal behavior of competent AI workers and enforce required hard safeguards by simple, separately running Interface logic where an actual boundary exists. MUST not delegate Interface internal","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L80:O1","line":80,"token":"MUST","text":"REQ-AI-39-MATRIX-001: Each uppercase MUST/MUST NOT remains inside its governing RFC and MUST have an individually stable requirement ID, MECHANICAL/EVALUATIVE/OUTCOME type, accountable Standard/Interface, protected targe","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L80:O2","line":80,"token":"MUST NOT","text":"REQ-AI-39-MATRIX-001: Each uppercase MUST/MUST NOT remains inside its governing RFC and MUST have an individually stable requirement ID, MECHANICAL/EVALUATIVE/OUTCOME type, accountable Standard/Interface, protected targe","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L80:O3","line":80,"token":"MUST","text":"REQ-AI-39-MATRIX-001: Each uppercase MUST/MUST NOT remains inside its governing RFC and MUST have an individually stable requirement ID, MECHANICAL/EVALUATIVE/OUTCOME type, accountable Standard/Interface, protected targe","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L81:O1","line":81,"token":"MUST NOT","text":"REQ-AI-39-TRUST-002: F0 worker self-claim, F1 correlation, F2 trusted tool boundary, F3 provider/physical observation and F4 separately reconciled evidence MUST NOT be conflated. DOCUMENT_STATUS, DESIGN_STATUS, IMPLEMENT","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L85:O1","line":85,"token":"MUST","text":"RATIONALE: Hundreds of MUST/MUST NOT word occurrences are not a set of individually testable requirements; self-certified checklists previously concealed invalid artifacts.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L85:O2","line":85,"token":"MUST NOT","text":"RATIONALE: Hundreds of MUST/MUST NOT word occurrences are not a set of individually testable requirements; self-certified checklists previously concealed invalid artifacts.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L86:O1","line":86,"token":"MUST","text":"REQUIRED FUTURE BEHAVIOR: The future requirements ledger MUST reference each governing RFC/Standard clause through stable obligation ID and edition, exact normative span, type MECHANICAL/EVALUATIVE/OUTCOME, responsible S","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L87:O1","line":87,"token":"MUST NOT","text":"ADVERSARIAL DESIGN ACCEPTANCE: Select an obligation with MUST NOT and a different one with MUST. Test both allowed and forbidden paths and compare actual external effect; self-reported acceptance without provider evidenc","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-39:D5:L87:O2","line":87,"token":"MUST","text":"ADVERSARIAL DESIGN ACCEPTANCE: Select an obligation with MUST NOT and a different one with MUST. Test both allowed and forbidden paths and compare actual external effect; self-reported acceptance without provider evidenc","classification":"UNCLASSIFIED_WORD_OCCURRENCE"}],"status":"DERIVED_WORD_LOCATOR_NOT_NORMATIVE"}