The company must have a code of conduct that defines and illustrates the kinds of behaviour to be prohibited as likely to amount to corruption or influence peddling; it is integrated into the règlement intérieur and so goes through the staff representative consultation of article L. 1321-4 of the code du travail. The AFA expects it to be written after the risk map, structured by type of prohibited behaviour with concrete illustrations (gifts and hospitality, facilitation payments, conflicts of interest, patronage, sponsorship, lobbying, representation costs), to present the internal alert system, to state that breaches lead to disciplinary sanctions, to name the function answering questions, to be clear and unequivocal, prefaced and validated by the governing body, applicable everywhere the company operates (with local versions where needed), communicated to third parties with a contractual clause where useful, and reviewed after each risk map update with an effective date (paragraphs 156 to 178).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.