The component must protect the integrity of sessions and reject invalid session IDs; the ISAGCA paper places it among the SL-C 2 additions. No component enhancement: the IIC list notes that the 3-3 enhancements (invalidation at logout, unique and random session IDs) have no 4-2 counterpart.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.