Per R155 Annex 5: threats including back-end servers + vehicle data and code + external connectivity + update process + supply chain + insider + privacy + maintain mitigations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.