A Appendix: Default Functional Security Implementation
https://docs.oracle.com/cd/E12448_01/rms/pdf/160/rms-160-og3.pdf
Default Security Reference Implementation (but not the sentence 'The source of truth for default reference implementation is jazn-data.xml').
Refer to the tables on pages 29 - 76 of the PDF listed above.