Programs are executed with the checks and protections the language, compiler, runtime, hardware and operating system can provide switched on, such as strict modes, memory-safety and bounds checks, stack protection and address-space randomisation. Because the checks only act when code runs, developers select or construct the test cases that exercise the code under them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.