For software made available for internal sharing or reuse, the Center Director, or designee (typically the civil servant who is the technical contact for the product), keeps a list of everyone who contributed to the software and ensures the product carries disclaimer and indemnification provisions, for example in a README, stating that it may fall under US export control rules, is provided as is without warranty, and that the recipient waives claims against and indemnifies NASA and its contractors.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.