An embedded device must provide protection from malicious code through means the supplier documents (such as allow-listing or signed code). No enhancement: the IIC list names RE 1 (report the protection version) only for the host device. The identifier is named in the held IIC SMM mapping list; the 4-2 text is not held.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.