API endpoint B1
AC-4: Information Flow Enforcement