Imagine you're a bouncer at a nightclub and you spot someone acting suspicious near the bar. You could eject them — but they're also the only person holding up a load-bearing pillar. Kick them out and the ceiling collapses. That's the core tension this paper formalizes: in cyber-physical systems, the act of enforcing security can itself cause physical harm. A compromised sensor feeding bad data to a power grid is dangerous, but cutting its telemetry feed blind can leave operators with no visibility into a cascading failure. The committed claim: SA-ZT is the first Zero Trust architecture that treats restriction-induced physical consequences as explicit policy inputs, not afterthoughts. The authors map NIST's seven ZT tenets against nine "convergence strains" specific to IoT and CPS — things like long-lived unpatched devices, shared physical-cyber state, and telemetry that serves both monitoring and automated control. They argue existing ZT literature handles the cyber risk of attacks but ignores the physical risk of enforcement actions themselves. The architecture adds two new components to the standard NIST ZT model: a Safety Engine and a Telemetry Broker. The Safety Engine evaluates candidate enforcement actions against both residual cyber risk and restriction-induced physical consequences, selecting the response that optimizes across both. The Telemetry Broker separates three distinct capabilities — raw visibility (can you see what a sensor reports?), estimator influence (does that reading feed into automated state estimation?), and command authority (can the device change physical state?). This three-way split is the key structural contribution. You can strip a suspicious sensor's influence on automated control loops while still observing its readings for forensic or monitoring purposes. The validation is an IEEE 30-bus power system case study under false-data-injection attack. The authors walk through how SA-ZT handles a compromised sensor differently than naive ZT: instead of a binary allow/deny, the framework can downgrade the sensor's estimator influence while preserving its telemetry visibility, and the Safety Engine evaluates whether full disconnection would violate operational constraints. The case study is illustrative, not benchmarked — it demonstrates the framework's expressiveness, not its empirical superiority over alternatives. The baseline landscape here is sparse. The authors cite NIST SP 800-207 as the canonical ZT architecture and survey prior CPS-security work (Humayed et al., Giraldo et al., Duo et al.) but there's no direct competitor implementing safety-aware enforcement selection. This is both the paper's strength — genuinely new framing — and its weakness: without a competing approach to benchmark against, the validation is necessarily qualitative. The nine convergence strains are well-argued but derived analytically, not from incident data. The architectural family is policy-based access control extended with multi-objective optimization (cyber risk vs. physical consequence). It leans on the NIST ZTA's Policy Decision Point / Policy Enforcement Point pattern but restructures the information flow to separate visibility, influence, and authority channels. The compute requirement is modest — this is a framework paper, not a scaling result. The honest gap: no implementation, no simulation with quantitative metrics, no comparison against a baseline enforcement strategy on measurable outcomes like attack containment time, false-positive physical disruption rate, or operational cost. The IEEE 30-bus walkthrough is a worked example, not an experiment. The obvious next step — a simulation comparing SA-ZT enforcement decisions against naive ZT on a realistic CPS testbed with injected attacks and measurable physical consequences — was not run. My read: this is a framework-first paper establishing the conceptual contribution before the empirical follow-up, which is likely the next publication.
