The employer keeps workers' health status confidential and does nothing that could compromise that confidentiality, for example screening through direct or indirect tests or asking about earlier tests or medication.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.