Where biometrics are provided, they must not be the only means of user identification or control, unless at least two biometric options using different biological characteristics are offered.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.