A nondeterministic system MUST NOT be given direct access to data.

Any such access MUST be gated by a deterministic system.