Before outsourcing a critical business service a participant must conduct due diligence on the provider, put the arrangement in a binding agreement (services and quality, notice of developments, termination, orderly transfer), monitor performance, manage conflicts, ensure it can still meet its resilience, security and continuity duties, and give itself, its auditors and ASIC access to the provider's records.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.