The device can be authorised for use only with at least two authorised people exercising dual control: logically, through two passwords or authentication codes each of five or more characters, or physically, through a lock that needs two high-security keys. Where the device supports only one password, that password is divided into two halves of five or more characters each, held by different people.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.