All suspicious activity is identified and recorded for at least a year with the devices and merchant affected, the date and time, the downtime, the resolution time and whether any account data was exposed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.