Developers should treat a major update to an AI system as if a new model had been developed, running the security testing and evaluation process again to protect users, and should help system operators assess model changes and respond to them, for example through early access by beta testing and through versioned APIs.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.