ICT that identifies users or is controlled through a biological characteristic must not make one specific characteristic the only route; a dissimilar biometric or a non-biometric method must also be available.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.