The secure default settings are implemented and each setting is documented for software administrators; the documentation can be produced earlier, when the secure baseline is defined under PW.9.1.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.