The asset owner shall restrict general purpose user messaging (email, chat, web browsing) in the IACS, which the 3-3 SR 5.3 counterpart implements at the system level.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.