Software updates can only be executed when the vehicle has enough power to complete the update process, including recovery to the previous version or reaching a safe state; evidenced by a description of the measures and a demonstration or physical test (ISO 24089 7.3.4.3).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.