Where full compliance with a requirement is not possible for a given AI application, the organisation takes a demonstrably responsible approach: a risk assessment is carried out and the additional risk is managed within the Section 3 ethical risk management activities.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.