NAS signaling between UE and AMF must be integrity protected and confidentiality protected using NAS keys derived from KAMF, with negotiated algorithms from the 5G security algorithm set.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.