Where VMs of different users share a host, no application in one VM may directly reach another VM, because covert channels through shared physical resources such as memory can leak information; the organisation sets policy on the use of shared clipboards between VMs on the same hypervisor, a convenience that is also an attack path.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.