Run a programme through which researchers can report vulnerabilities with legal safe harbour, and determine the root cause of each report, including whether one of the secure by design practices would have prevented it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.