My system engineering experience avoided "must" as insufficiently specific.
We used "shall" and avoided "not". Because testing: how do you prove a "not"?
Source: 35 years of SE
We used "shall" and avoided "not". Because testing: how do you prove a "not"?
Source: 35 years of SE
Agree "not" is tougher, and best avoided when you can.