On all interfaces the control system shall enforce authorizations assigned to all human users for controlling use of the system, supporting segregation of duties and least privilege. The enhancements extend enforcement to all users including processes and devices (RE 1), add permission mapping to roles (RE 2), supervisor manual override for a configurable time (RE 3) and dual approval for critical actions (RE 4); the ISAGCA paper describes RE 1 and RE 2 as the SL 2 capabilities.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.