The embargo is the period during which a vulnerability is known to the vendor and possibly to reporters and coordinators but not yet public, running from receipt until the coordinated publication of the advisory with the remediation; ISO/IEC 30111 6.5.3.6 sends vendors here and to 7.3 for choosing the disclosure date so that it aligns with remediation availability, and 6.7 for keeping advisories confidential until the coordinated date.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.