Enforce approved authorizations for information flow within the system and between connected systems: prevent CJI from crossing the public network unencrypted, block outside traffic that claims to originate inside the agency, and pass no web request to the public network that does not come from agency-controlled or internal boundary protection devices such as proxies, gateways, firewalls or routers.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.