Before a baseline-deviating change to the operating system or firmware, commercial or open-source software, or security patches, and when the method is available from the software source, verify the identity of the software source and the integrity of the software obtained from it; contracts need not be renegotiated.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.