The practitioner must accumulate instances of non-compliance found by the entity and the practitioner, other than clearly trivial ones, to conclude on the statement (attestation) or directly (direct), and must assess individually and in aggregate whether the non-compliance is material.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.