An article was submitted to HN how #Authorization terminology is a mess and proposed a way to fix it.
Top-level comment started a discussion on the difference between SHOULD and OUGHT TO. The latter expresses a moral imperative.
SHOULD is defined in #RFC2119 which is referenced in all #ActivityPub specs and #FEPs.
Now, there is an April Fool's RFC6919 which defines OUGHT TO. While this RFC is created just for fun, to express all kinds of wriggle room to a spec, which is often the reality in a codebase, the OUGHT TO indicator is not all that bad for actual use in #fediverse specs.
The fediverse is more than cold, hard technology space. It is a place where particular values and principles are held dear, moral imperatives to build better alternatives to social media.
An ought combines with a should like this:
"Privacy OUGHT TO be protected first and foremost, therefore an opt-in mechanism SHOULD be provided"
https://idpro.org/authorization-terminology-is-a-mess-lets-fix-it/
https://news.ycombinator.com/item?id=49522367
https://www.rfc-editor.org/rfc/rfc6919.html#page-4