A nondeterministic system MUST NOT be given direct access to data. Any such access MUST be gated by a deterministic system.