Docs: Restructure section 9.2.

Part of restructuring work for CDD.

Test: N/A
Bug: 64811960
Change-Id: I9cf7fbb4938b714682b434da196b2321a9b9bcea

diff --git a/9_security-model/9_2_uid-and-process-isolation.md b/9_security-model/9_2_uid-and-process-isolation.md
index 6c584ce..31d7f46 100644
--- a/9_security-model/9_2_uid-and-process-isolation.md
+++ b/9_security-model/9_2_uid-and-process-isolation.md

@@ -1,8 +1,10 @@
 ## 9.2\. UID and Process Isolation
 
-Device implementations MUST support the Android application sandbox model, in
-which each application runs as a unique Unixstyle UID and in a separate
-process. Device implementations MUST support running multiple applications as
-the same Linux user ID, provided that the applications are properly signed and
-constructed, as defined in the
-[Security and Permissions reference](http://developer.android.com/guide/topics/security/permissions.html).
+Device implementations:
+
+*    [C-0-1] MUST support the Android application
+sandbox model, in which each application runs as a unique Unixstyle UID
+and in a separate process.
+*    [C-0-2] MUST support running multiple applications
+as the same Linux user ID, provided that the applications are properly signed
+and constructed, as defined in the [Security and Permissions reference](http://developer.android.com/guide/topics/security/permissions.html).