Manufacturers should publicly notify customers and registered users when a security flaw materially affects compliance with the requirements, with clear instructions on what action to take.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.