Developers provide security updates and patches wherever they can and notify system operators of them; system operators deliver those updates and patches to end-users. Developers keep mechanisms and contingency plans to reduce security risk where an update cannot be issued for an AI system.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.