Agencies should limit each system user's rights so that they can run only a defined set of executables needed to carry out their duties.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.