Per PTES Intelligence Gathering phase: collect information about target. Requirements include (a) conduct passive OSINT including domains + employees + technology + (b) conduct active reconnaissance including DNS + WHOIS + service enumeration + (c) social media + LinkedIn + GitHub investigation + (d) identify entry points + attack surface + (e) document findings + (f) maintain chain of custody for evidence.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.