Integrity asks whether data and program logic are protected from improper modification. A measure relates detected or prevented modifications to the changes attempted or the data examined. Integrity is about unauthorised change, not about the absence of bugs. The evidence can be a checksum, a signature, an audit comparison or a test that attempts an unauthorised write. The measure should cover data in transit and at rest, and the program logic itself, because a modified binary is an integrity failure. A product that detects a change but cannot say when it happened has a weaker integrity property than one that can.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.