A notification event is treated as discovered on the first day it is known to the institution, and the institution is deemed to know of an event when it is known to any employee, officer or other agent other than the person committing the breach.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.