Before secure operation a station association is established: the 2023 edition uses public-key certificates to authenticate stations, authorized remote stations are configured, certificates are verified at association and during normal operation, and update keys are initialised and refreshed through the association procedure with defined controlling and controlled station state machines.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.