Where the provider replicates data across locations or countries for availability, every replica is protected by the same access control policy, which is populated to all hosts that process that data, and policy synchronisation on change is built in, with a central policy system updated first and the replicas' policies synchronised from it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.