Article 12(5): operators keep all documentation related to due diligence, including records, measures and procedures under Article 8, for at least five years and make it available to authorities on request.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.