Per US Consumer Product Safety Act Section 15(b): Substantial Product Hazard Reporting to CPSC within 24 hours of obtaining information including cybersecurity hazards.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.