The identity of personnel must be established and verified to an appropriate level of assurance before granting access.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.