Every change to a critical function of a POI device (application and firmware updates, security-sensitive configuration such as whitelists or debug mode) is logged on the device or in the provider's remote-management system.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.