The Host System enforces role-based access with at least an operator role for day-to-day use, an administrator role for configuration, a cryptographic administrator role for key and cryptographic configuration and a security role for auditing.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.