The TSF identifies and manages users and roles before allowing access to TSF-mediated actions, associating security attributes with user subjects and authorising subjects according to role, as Annex A illustrates with the phases and roles of QKD module operation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.