Full disk encryption, or partial encryption where access controls will only allow writing to the encrypted partition, is implemented when encrypting data at rest.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.