The business keeps a copy of every written audit report on its program from the past four years, so that an auditor of the program or an authorised officer can inspect them on request.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.