Where workload to workload control is the primary concern, deploy micro segmentation that places each resource or small group of resources behind its own gateway. Use software defined controls rather than relying on VLAN topology.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.