The leader identifies the roles played in the system and the scope of authority each carries (what the authorization enables and what it does not, who grants it and with what expectations), distinguishes role from self so that attacks on the role are not taken as attacks on the person, and keeps role flexibility, since context counts.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.