A community control the standard adds: the rights of the community, or of its supporting entity, to audit members' handling of shared information, and the rights of members over audits of the community's own facilities, agreed in the sharing agreement so that trust between members (4.2) rests on verifiable practice rather than assertion.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.