The controller ensures only authorised users on the valid list use the database; for medium and high levels identification is as far as possible by a physical means under the user's exclusive control and the procedure sets password strength, failed attempts, change frequency (at least every six months), automatic logoff and handling of authentication failures; permissions are revoked immediately when a role ends and known passwords changed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.