Every authentication mechanism required by AUM-1 (on a network, user or machine interface) checks the entity's claim against evidence from at least one of knowledge, possession and inherence. Where a user interface carried over a network interface gives access to a financial function that moves money, monetary assets or virtual currency, the mechanism checks evidence from two different ones of those three categories.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.