A distributor that knows or suspects a product it made available is non-conforming must make sure corrective measures, withdrawal or recall are taken. On learning of a vulnerability it must tell the manufacturer without undue delay and, for a significant risk, immediately inform the authorities of the Member States concerned with details.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.