Every authentication mechanism required by AUM-1 checks all the relevant properties of the authenticators it accepts, to the extent the information available in the environment of use allows: for instance validity period, revocation status, issuer, binding to the claimed entity and integrity.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.