What color type is assigned to a TLOC when the TLOC endpoint is located behind NAT?

When a TLOC (Transport Location) endpoint is behind NAT (Network Address Translation), its external, routable IP address is different from its internal, private IP address. Cisco SD-WAN uses the "public" color type to designate TLOCs that are reachable via a public IP address, even if the actual device is behind a NAT device. This indicates that the TLOC is accessible over the internet and requires NAT traversal mechanisms. "private" is incorrect because it refers to TLOCs with private IP addresses that are not directly routable over the internet without NAT. "MPLS" and "blue" are examples of other TLOC color types that describe the transport medium or a custom label, not specifically the NAT status.