Because AI can behave unpredictably and opaquely, adopting it rather than an existing technology is a balance-of-risk judgement; for every AI component assessed as major risk or above, the reasoning is written down and signed off at the right level in the AI governance chain.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.