Use DISA STIG Viewer (or an equivalent) to execute STIG checklists and record the status of each requirement (Open/Not a Finding/Not Applicable/Not Reviewed) in a checklist (.ckl) artefact.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.