The platform's APIs that manage access control for VMs, hypervisors and networks are themselves monitored, because unmonitored AC APIs can leave policies unenforced or wrongly enforced across the hypervisors, VMs and network controllers they drive.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.