Where the differences between traditional software and AI assurance present too much assurance risk for an application, AI is not adopted. Where assurance risk can be tolerated, assurance activity is scaled to the risk that wrong AI outputs would pose.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.