All incident handling actions are recorded: initial, interim and final reports, emergency actions and resulting system changes; evidence that may be needed in court is recorded with legal advice; incident analysis feeds back into the choice of auditable events.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.