For actionable scam intelligence the entity must report the outcome to the general regulator, in the period, manner and form the Rules prescribe after the safe harbour period ends, including whether it reasonably believes the activity is a scam. Contractual confidentiality duties do not override this.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.