The project manager performs a software architecture review on Category 1 projects under NPR 7120.5 and on Category 2 projects whose payload risk classification under NPR 8705.4 is Class A or B.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.