The policy commitment should be approved at the most senior level, informed by relevant expertise, stipulate expectations of personnel and partners, be publicly available, and reflected in operational policies and procedures.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.