Set access control policies and procedures that give each user their own user ID and cover suitable passwords, privileged accounts, authentication and oversight by management.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.