A user-controlled enforcement point is present, verifies agent identity, enforces security policy, and returns GPARS standard errors (AUTHORIZATION_DENIED, SERVER_UNAVAILABLE).
Non-Compliant
MCP servers accept requests directly from agents without an enforcement point, or the enforcement point does not return GPARS standard errors.
Partial or transitional compliance levels are not defined in v0.1 and are reserved for future revision.