A controller must respond without undue delay and within 45 days of receiving a request; it may extend once by another 45 days where reasonably necessary given complexity and volume, if it tells the consumer of the extension and the reason within the first 45 days.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.