Agencies must: identify their mail servers by means of SPF or Sender ID; and mark, block or otherwise identify incoming emails that fail SPF checks so the email recipient can be notified.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.