Information is qualified under classified-information law or, for unclassified information with handling restrictions, as USO OFICIAL; the policy names who owns each information and the criteria for its security level, and each owner assigns, documents, approves and alone may change the level.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.