The TSF can undo the last operation or a bounded series of operations and go back to an earlier known-good state. Components: FDP_ROL.1 Basic rollback and FDP_ROL.2 Advanced rollback (rollback of all operations within the bound).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.