Physical information barriers as the tangible side of A.4: separate locations, restricted areas, secured files and systems, and controls on documents and communications between the separated functions, applied where procedural separation alone would not prevent the flow of information.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.