The control system shall keep information confidential, both at rest and in transit, where explicit read authorization is supported for it. RE 1 covers that protection, at rest or in transit, where untrusted networks are involved; RE 2 protects it across zone boundaries.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.