A record of all suspicious activity is kept for at least a year, identifying the devices and merchant affected, the date and time, the downtime, the resolution time and whether any account data was transmitted in the clear.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.