Per CPSC + NIST IR 8425: Connected Product Cybersecurity Hazard Identification + risk assessment + alignment with NIST + secure default configuration.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.