Each alarm event is documented. In particular: a person involved in an alarm event may not sign it off; opening any emergency entrance or exit triggers an alarm event; staff with assigned security duties respond actively to every physical intrusion alarm within 30 minutes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.