An importer that knows or suspects a product it placed is non-conforming must immediately take corrective measures, or withdraw or recall it. On learning of a vulnerability it must tell the manufacturer without undue delay, and where the product presents a significant risk immediately inform the authorities of the Member States where it made the product available, with details of the non-compliance and measures taken.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.