In the challenge flow the ACS requires an interactive step-up authentication of the cardholder (via CReq/CRes) before returning a result, used where risk, data quality or regulatory requirements (e.g. SCA) demand stronger assurance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.