When public key infrastructure is used, the component must be able to work and interoperate with that PKI, either itself or by integrating with a system that can, in the way SR 1.8 of 3-3 requires (SL 2).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.