For CONFIDENTIAL, SECRET and TOP SECRET systems, agencies should sign data and confirm signatures with a product that has an evaluation of EAL4 or higher.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.