The vendor provides a reliable, documented channel for external finders to submit vulnerability reports and acknowledges receipt within a defined timeframe.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.