The asset owner shall use cryptographic mechanisms per accepted practice where data protection requires them, selecting algorithms and key sizes that remain sound for the life of the system.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.