Agencies should not allow executable files to be downloaded from external websites unless there is a demonstrated and approved business requirement.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.