A person should be able to form a view on whether a solution meets their privacy and security expectations. Each solution should publicly disclose how it meets the privacy and security objectives.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.