Where the programming language does not itself enforce certain criteria (use of a language subset, strong typing, defensive implementation techniques), those criteria shall be handled through design, modelling or coding guidelines or through the development environment, MISRA C:2012 or CERT C being examples.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.