Collaboration across cloud providers is set up so that inconsistent access elements do not corrupt the integrated policy: different providers' subject attribute sets are reconciled, since an attribute with the same name can confer different privileges, and the approach to policy integration (global policies through a central mechanism, or lighter arrangements given how transient inter-operation is) is chosen so that no user or VM gains conflicting or blocked privileges.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.