Per MAF: risk + human involvement. Requirements include (a) risk assessment for AI applications + (b) Human-in-the-Loop or Human-over-the-Loop as appropriate + (c) determine level of human involvement per risk + (d) safety + reliability + robustness.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.