Each secure communication mechanism required by SCM-1 applies best practice to protect the security and privacy assets it carries against replay, except where a duplicated transfer creates no replay threat or where interoperability requires a deviation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.