For medium and high levels an automatic mechanism records access to database systems with user identity, date and time, component, access type and scope and whether it was granted, which cannot as far as possible be disabled or altered, and which detects and alerts on such attempts.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.