Chapter 30 · Part 5: Model, tool, and supply chain security
Third-party tools and MCP servers require trust tiers.
Frameworks: MITRE ATLAS
Layers: tool-selection · execution
Public practitioner doctrine. Free doctrine. Open knowledge. Paid enforcement.