I am not a specialist on the regs, but here we are looking at "point of control" requirements. Best explained in Figure P.1