Information stored in databases (table lists and so on) is identified, and applications, servers and users needing access to it are clearly identified and controlled under the access control policy.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.