Each person is informed of security duties covering disciplinary measures, obligations during and after the post, confidentiality during and after assignment, and for contracted staff the duties of each party and incident resolution; R1 obtains express confirmation that users know and accept the security instructions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.