Chapters 5 and 8 (urn:nato:stanag:4778:profile:ooxml 1:2 and urn:nato:stanag:4778:profile:gopc 1:2): the Binding Information is kept inside the Open Packaging Convention package in the customXml area, referencing package parts only through DataReference elements (Data elements must not be used) using pack URIs with an empty authority, relative to the package root. For Office documents the package files listed for each document type must be referenced so the whole document is covered; for the generic OPC profile a top-level relationship identifies the binding, the protected file sits in a files folder and the BindingInformation in a customXml file. Cryptographic protection follows the cryptographic artefact profile.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.