{"rfc":45,"draft":3,"source_sha256":"25de457154e0e37763791bf657621eb13a94360ae8c30f6f2d63737d739474ad","candidate_occurrences":[{"source_locator":"RFC-AI-45:D3:L44:O1","line":44,"token":"MUST","text":"Each protected operation MUST be evaluated against the most recent appropriate collector-verified source reads, research submission events, authorized training result, worker assignment epoch and piece/target revision. T","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-45:D3:L53:O1","line":53,"token":"MUST","text":"Every simple-logic forensic recorder and dependent Interface MUST review this Standard during its design. Real collectors may observe only their own scoped boundaries and shall report scope limitations. AI workers MUST t","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-45:D3:L53:O2","line":53,"token":"MUST","text":"Every simple-logic forensic recorder and dependent Interface MUST review this Standard during its design. Real collectors may observe only their own scoped boundaries and shall report scope limitations. AI workers MUST t","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-45:D3:L63:O1","line":63,"token":"MUST NOT","text":"REQ-AI-45-CUSTODY-001: F2/F3/F4 require a stated and tested trust boundary, collector identity and version, key custody, provider scope, protected event sequence and tamper/retention plan. Hashes from the same compromise","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-45:D3:L64:O1","line":64,"token":"MUST","text":"REQ-AI-45-CUSTODY-002: A tool request, invocation, provider acceptance, durable save, public delivery and completed business outcome MUST be separately observable states; human authority is a separate authenticated appro","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-45:D3:L65:O1","line":65,"token":"MUST","text":"REQ-AI-45-CUSTODY-003: Current context MUST preserve collector provenance, health and freshness independently of continuity and assignment; the later assignment target overlay requires revalidation at protected execution","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-45:D3:L69:O1","line":69,"token":"MUST","text":"REQUIRED FUTURE BEHAVIOR: Evidence classes MUST describe what the observer actually saw: F0 self-claim, F1 correlation, F2 trusted boundary observation, F3 external provider/physical confirmation, F4 independently reconc","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-45:D3:L69:O2","line":69,"token":"MUST","text":"REQUIRED FUTURE BEHAVIOR: Evidence classes MUST describe what the observer actually saw: F0 self-claim, F1 correlation, F2 trusted boundary observation, F3 external provider/physical confirmation, F4 independently reconc","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-45:D3:L69:O3","line":69,"token":"MUST NOT","text":"REQUIRED FUTURE BEHAVIOR: Evidence classes MUST describe what the observer actually saw: F0 self-claim, F1 correlation, F2 trusted boundary observation, F3 external provider/physical confirmation, F4 independently reconc","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-45:D3:L70:O1","line":70,"token":"MUST","text":"ADVERSARIAL DESIGN ACCEPTANCE: Create two matching AI-authored logs with no provider event: F4 MUST fail. Simulate compromised shared root, collector outage and a provider response with unsupported evidence; assign the c","classification":"UNCLASSIFIED_WORD_OCCURRENCE"}],"status":"DERIVED_WORD_LOCATOR_NOT_NORMATIVE"}