A process shall be employed to provide integrity verification for all scripts, executables and other files used in the product, so that users can verify what they received is what the supplier released.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.