Attesting to conformity with secure software development practices; as EO 14144 records, OMB required agencies to use only software from providers that attest to those practices (OMB M-22-18, with CISA's common attestation form), and EO 14144 sought machine-readable attestations with validating artifacts, a provision EO 14306 struck.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.