The control system shall prevent further access after a configurable period of inactivity or on manual activation, keeping the lock until the user re-authenticates, with the caveat that a lock must not prevent an operator's response in an emergency. It has no enhancements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.