The Regulator, or someone the Regulator authorises, must be let into the facility at any reasonable time to audit or monitor the conditions and the dealings being carried out.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.