Ahead of signing, the supplier gives insight into the subcontractors in its chain and into the risks that come with them, and the entity assesses whether those risks are acceptable.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.