Article 5(5) and (6): downstream operators and traders that learn of relevant new information, including substantiated concerns, that a product they supplied is at risk inform the authorities and the businesses they supplied (for exports, the authority of the Member State of production); non-SME downstream operators and traders that learn before supplying that a product may be non-compliant inform the authority and, on substantiated concerns, verify that due diligence was exercised with no or negligible risk found, and do not supply or export until that is shown.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.