The manufacturer records which version of the legacy software is in use and why it is justified to keep using it, drawing on the results of the legacy assessment; that justification is what allows its continued use under the standard.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.