{"file":"docs/seed/API_Request_Format.txt","start":30,"end":44,"lines":[{"number":30,"text":"The server must:"},{"number":31,"text":""},{"number":32,"text":"Parse with strict size limits."},{"number":33,"text":"Locate the public authentication component."},{"number":34,"text":"Reject unknown or inactive versions."},{"number":35,"text":"Check the timestamp window."},{"number":36,"text":"atomically record the nonce."},{"number":37,"text":"Reject repeated nonces."},{"number":38,"text":"Recalculate the body digest."},{"number":39,"text":"Verify the authentication signature."},{"number":40,"text":"Verify a purpose signature where required."},{"number":41,"text":"Evaluate effective permissions."},{"number":42,"text":"Apply limits."},{"number":43,"text":"Record the authorization decision."},{"number":44,"text":"Execute the operation."}]}