Every change to an application is managed under documented processes that follow the vendor's Implementation Guide, record approval, reason and impact, test functionality and hold back-out procedures; adding an application or device type to a listed solution goes through the Council's delta-change process.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.