The project shall, in consultation with stakeholders, identify the risks, and their contexts, that bear on whether the design can feasibly be implemented: estimate how likely the hazard or harm is, estimate its consequence (or the benefit of an opportunity), put the likelihood together with the severity of harm to arrive at a risk level for each value, and prioritise the risks.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.