Where there is a significant risk of a security compromise, the provider must take reasonable and proportionate steps to bring to the attention of users who may be adversely affected, in clear and plain language: the existence of the risk, the nature of the compromise, the technical measures users could reasonably take to protect themselves or mitigate the effect, and a named contact for further information.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.