Classify every certificate-based mechanism in the estate by its arithmetic setting, because the setting drives key sizes, point encodings and the verification code path. Where a system claims a mechanism but cannot say which setting it uses, the inventory is not complete enough to answer the amendment.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.