Communicate externally, with due regard for commercial confidentiality, competition law and security, the policies, incident processes, significant risks identified and prioritised, prioritisation criteria, prevention and mitigation actions with timelines and evaluations including red teaming, tracking measures, remediation, system capabilities, limitations and appropriate and inappropriate uses, meaningful information on significant new releases, how stakeholders are engaged, and for developers incidents and attempts to circumvent safeguards (notably for general-purpose AI); disclose regularly, clearly, accurately and in enough detail, and adapt the information to audiences including vulnerable stakeholders such as workers; communicate directly and accessibly with people affected by impacts the enterprise causes or contributes to.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.