The provider must fully justify the necessity, suitability and security of applying generative AI in each field within the service's scope; where the service is used for critical information infrastructure or important scenarios such as social governance, public security, automated control, medical information, psychological counselling or financial information services, it must have security protection measures matched to the risk level and the scenario; where the service is suitable for minors it must let guardians set anti-addiction measures such as time limits, must not offer minors paid services inconsistent with their civil capacity, and must actively present content beneficial to minors' physical and mental health; where the service is unsuitable for minors it must take technical or management measures that keep minors from using it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.