Where the site handles products or materials outside the audit scope, such as by-products, they must be controlled so they create no safety, authenticity or legality risk to in-scope products.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.