A documented requirement specification exists for the PEMS and for every subsystem in it, and it contains, and marks out separately, whatever essential performance and risk control measures that system or subsystem implements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.