The provider should store security annotation data in isolation from other data, so that the datasets used for safety fine-tuning and testing cannot leak into or be contaminated by general training data and access to them can be controlled.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.