The payment software must implement strong authentication and access control mechanisms for all users, processes, and services accessing sensitive functions or data within the software.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.