If there are signs of a threat to meeting the relevant ethical requirements, the engagement partner assesses it under the firm's policies, drawing on information from the firm, the team and elsewhere, and takes suitable action.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.