The control system shall enforce usage restrictions for mobile code (scripts, applets, macros) including preventing its execution, requiring authentication and authorization before it runs, restricting its transfer and monitoring its use. RE 1 requires mobile code integrity checks before execution.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.