Users assessed as high-risk should access sensitive data only in physically secured isolated environments (a standalone system with continuous monitoring and technical blocks on unauthorised transfer) or virtually secured isolated environments (infrastructure that stops exfiltration), with access monitored at all times.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.