Mobile devices authorised for CJI access use local device authentication to unlock the device, with an authenticator that meets the IA family requirements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.