Per Cavoukian PbD Principle 3: Privacy Embedded into Design. Requirements include (a) embed privacy into design + architecture of IT systems + business processes + (b) treat privacy as essential design component not bolt-on + (c) implement privacy architecture patterns library + (d) integrate with SDLC + change management + procurement + (e) conduct privacy threat modeling + (f) maintain documented privacy design decisions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.