The provider's assurance status (Level 1 self-assessment, Level 2 certification/attestation, or continuous) is published in the publicly accessible CSA STAR Registry so customers can verify it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.