Agencies must use the SHA-2 family of hashing algorithms in new systems. SHA-1 may be used ONLY in legacy systems.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.