The project installs the system in production and the security practitioner verifies, by review and inspection, that every security solution is installed and configured as in the implementation representation, correcting deficiencies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.