The asset owner shall authenticate human users before granting access to the IACS, with the strength matched to the zone's level.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.