Stand up a Policy Engine that decides whether to grant or deny access by combining policy, trust algorithm, and signals from external data sources. The engine must support deterministic logic that auditors can replay.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.