The manufacturer must publish the defined support period, a period of time with an end date, for which security updates (software updates that protect or enhance the product's security, including updates addressing a security issue discovered by or reported to the manufacturer) will be provided by or for it, covering update-capable hardware, update-capable software pre-installed at supply, update-capable software that must be installed for all of the manufacturer's intended purposes, and update-capable software developed by or for any manufacturer and used for or in connection with those purposes (Schedule 1 clause 4(1) to (3)). The period must not be shortened after publication, and an extension must be published as soon as practicable (clause 4(4), (5)). The information must be accessible, clear and transparent and available without prior request, in English, free of charge, without asking for personal information, and understandable by a reader without prior technical knowledge (clause 4(6)); where the manufacturer offers the product on a website it controls, the support period must be published prominently with the information meant to inform consumers' purchase decisions and, wherever the product's main characteristics appear, alongside them or with equal prominence (clause 4(7)).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.