When developers identify AI security threats they cannot resolve, they tell the system operators so those operators can model the threat in their own systems; system operators then inform end-users so that users know the threats exist. The communication should describe the risks, their potential impact and recommended actions to address or watch for them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.