Confidentiality is the fourth principle. The subject is the limit on disclosure. A programme that applies this principle distinguishes information that is confidential from information that is merely inconvenient to publish, and it records the distinction. The rationale is where the standard explains the balance against transparency.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.