An assessor may override a rule's severity on a checklist by selecting a new value, which requires an override reason before the change is saved; the overridden severity is marked with an asterisk so the departure from DISA's published category is visible in the checklist and its exports.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.