The methodology states whether wildcards are used and how, never for a change with security impact, never in an element that represents security-impacting changes and never preceding version elements that do, within the Program Guide's rules.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.