At data preprocessing: through privacy by design and similar approaches, collect training data properly and, where it includes third parties' personal data or material needing attention to intellectual property rights, ensure it is handled lawfully throughout the AI lifecycle (safety, privacy, security); and before and throughout training, apply suitable protection, for example by considering a data management and restriction function that controls access to data (safety, security). Table 1 repeats this item as the developer's privacy item D-4) i.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.