The authenticity and integrity of software updates are protected to reasonably prevent their compromise and prevent invalid updates. The Interpretation Document: the vehicle validates authenticity and integrity, for example by signature verification, reasonably meaning foreseeable, state-of-the-art prevention; evidence includes the mechanisms and authentication test results (ISO 24089 7.3.4.6, 7.3.4.7; R155 as reference, Annex 5 M16).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.