When an authenticated user activates a subject to act for them, the TSF associates the user's security attributes with that subject and governs how the association is set initially and changed. One component: FIA_USB.1 User-subject binding.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.