The project manager writes software requirements for collecting, reporting and storing the data that shows adversarial actions have been detected, so the system can tell when it is under attack and keep the evidence.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.