Every physical entry into the secure room is monitored and logged, with logs kept for three years or more and reviewed regularly by an authorised person who documents the reviews; the logs show at least who came in, at what time and why.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.