A formal authorisation process covers use of normal and alternative facilities, putting equipment (especially cryptographic) and applications into production, communication links with other systems, communication media, information media, mobile devices, and third-party services under contract or agreement.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.