{"rfc":8,"draft":7,"source_sha256":"69692887ce6026021109e768853c1c3c45145f77c2da510fbf2eb8f8e0f439fb","candidate_occurrences":[{"source_locator":"RFC-AI-8:D7:L14:O1","line":14,"token":"MUST","text":"0.2 The remaining architecture, source profiles, thresholds, schema, fallback, deployment decisions and test gates are DRAFT CANDIDATES. Even when words MUST, SHOULD and MAY appear, they mean proposed requirements under ","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-8:D7:L154:O1","line":154,"token":"MUST NOT","text":"The profile-refresh interval in RFC-AI 37 is independently six hours and MUST NOT be treated as a successful NTP synchronization. last_success_utc for provider evidence is updated only after verification; master_clock.tx","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-8:D7:L167:O1","line":167,"token":"MUST","text":"## MUST-DESIGN CRITERIA — CEO-DIRECTED PROPOSED FUTURE SYSTEM","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-8:D7:L168:O1","line":168,"token":"MUST","text":"MUST-08-01: MUST expose the single system time interface GetUTCDateNow() and trust state; MUST NOT have AI workers in development read local host clocks directly, including for logs, leases, freshness, filenames or audit","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-8:D7:L168:O2","line":168,"token":"MUST","text":"MUST-08-01: MUST expose the single system time interface GetUTCDateNow() and trust state; MUST NOT have AI workers in development read local host clocks directly, including for logs, leases, freshness, filenames or audit","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-8:D7:L168:O3","line":168,"token":"MUST NOT","text":"MUST-08-01: MUST expose the single system time interface GetUTCDateNow() and trust state; MUST NOT have AI workers in development read local host clocks directly, including for logs, leases, freshness, filenames or audit","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-8:D7:L169:O1","line":169,"token":"MUST","text":"MUST-08-02: MUST account for drift, stale/rolled-back clocks, synchronization-source failures and trustworthy time evidence under the time Standard; the interface MUST communicate UNKNOWN/UNTRUSTED when it cannot guarant","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-8:D7:L169:O2","line":169,"token":"MUST","text":"MUST-08-02: MUST account for drift, stale/rolled-back clocks, synchronization-source failures and trustworthy time evidence under the time Standard; the interface MUST communicate UNKNOWN/UNTRUSTED when it cannot guarant","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-8:D7:L169:O3","line":169,"token":"MUST","text":"MUST-08-02: MUST account for drift, stale/rolled-back clocks, synchronization-source failures and trustworthy time evidence under the time Standard; the interface MUST communicate UNKNOWN/UNTRUSTED when it cannot guarant","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-8:D7:L170:O1","line":170,"token":"MUST","text":"MUST-08-03: MUST maintain UTC display and ordering with millisecond precision where required, without inventing precision.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-8:D7:L170:O2","line":170,"token":"MUST","text":"MUST-08-03: MUST maintain UTC display and ordering with millisecond precision where required, without inventing precision.","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-8:D7:L175:O1","line":175,"token":"MUST","text":"REQ-AI-08-TIME-001: GetUTCDatetimeNow() MUST be the canonical UTC-instant Interface returning an RFC3339 Z datetime and independent clock-health/uncertainty data. Existing GetUTCDateNow() use MUST be documented as a depr","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-8:D7:L175:O2","line":175,"token":"MUST","text":"REQ-AI-08-TIME-001: GetUTCDatetimeNow() MUST be the canonical UTC-instant Interface returning an RFC3339 Z datetime and independent clock-health/uncertainty data. Existing GetUTCDateNow() use MUST be documented as a depr","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-8:D7:L176:O1","line":176,"token":"MUST NOT","text":"REQ-AI-08-TIME-002: Event timestamps MUST NOT be treated as distributed causal sequence, authorization, source freshness proof or assignment ownership. Use separate provider revision, collector sequence, operation ID and","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-8:D7:L177:O1","line":177,"token":"MUST","text":"REQ-AI-08-TIME-003: The six-hour master_clock.txt policy is a proposed health-expiration bound, not proof a clock is accurate or an excuse to perform blocking NTP calls on every read; independent NTP client state and hos","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-8:D7:L181:O1","line":181,"token":"MUST","text":"REQUIRED FUTURE BEHAVIOR: For future Interface design, GetUTCDatetimeNow() MUST be the canonical complete UTC instant with clock-health uncertainty. Existing GetUTCDateNow() is a versioned deprecated alias to that SAME i","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-8:D7:L181:O2","line":181,"token":"MUST","text":"REQUIRED FUTURE BEHAVIOR: For future Interface design, GetUTCDatetimeNow() MUST be the canonical complete UTC instant with clock-health uncertainty. Existing GetUTCDateNow() is a versioned deprecated alias to that SAME i","classification":"UNCLASSIFIED_WORD_OCCURRENCE"},{"source_locator":"RFC-AI-8:D7:L181:O3","line":181,"token":"MUST","text":"REQUIRED FUTURE BEHAVIOR: For future Interface design, GetUTCDatetimeNow() MUST be the canonical complete UTC instant with clock-health uncertainty. Existing GetUTCDateNow() is a versioned deprecated alias to that SAME i","classification":"UNCLASSIFIED_WORD_OCCURRENCE"}],"status":"DERIVED_WORD_LOCATOR_NOT_NORMATIVE"}