The other end is authenticated before exchanging information outside the security domain, active attacks (alteration, injection, session hijacking) are prevented and trigger incident procedures, and legally recognised authentication is accepted; reinforcements add VPNs, CCN-authorised algorithms, hardware devices and certified products.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.