The operating context of each AI component is clearly defined and communicated to the people who need it, risk owners and operators among them, and mitigations or measures limit what the system can do, by place, time or function, so that the risks become easier to quantify.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.