Where a dependency is provided by an external party, the organization should determine the contractual aspects that bear on readiness: the recovery and availability commitments the contract carries, the notification and support obligations during an incident, the exit and data return terms, and the gaps between what the contract promises and what the business requires, so that supplier dependencies are covered by agreement rather than assumption.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.