A tcb of class may satisfy (security requirements) by providding separation of users.
Requirements may satisfy a requirement by identifying classes.
Use can be in satisfying a (specification and verification requirement).
A functional specification may satisfy a (security policy model).
An (application code) may satisfy conventions of (security services).