Manufacturers must publish the minimum length of time during which security updates will be made available for each product, and ensure it is accessible without requiring the user to give personal information.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.