Harden container images: minimal base images, removal of unnecessary packages, non-root users and reduced attack surface.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.