Changes to assets are evaluated for priority, benefits, risks and impacts on function and security, and approved before being made, at least in an ad hoc way.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.