Per PTES Pre-Engagement Interactions phase: define engagement parameters. Requirements include (a) define scope including in-scope + out-of-scope assets + IP ranges + applications + cloud + APIs + (b) define rules of engagement including testing windows + escalation + emergency contacts + (c) obtain authorisation + sign-off + (d) define communication channels + reporting cadence + (e) determine threat model + objectives + (f) maintain documented engagement letter + scope.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.