On grant the conformity assessment body issues a certificate and a schedule of certification that distinguish what is certified (scope, components, indicators, contexts) from what is not (excluded functions, untested contexts, unsupported claims). The certificate names the item, the client's legal identity, the scheme and ISO/IEC 27566-1, a unique number, issue and expiry dates and the signatory; the schedule gives name, version and deployment reference, boundaries and contexts, indicators per component and at system level, assumptions and exclusions, data dependencies, local indicators and limitations. Certified clients enter the body's public registry with the scope and schedule publicly accessible unless legal or confidentiality limits apply, use the mark only within the certified scope under ACCS 0 rules, and may also be listed in the ACCS registry. A certified client may seek subsequent IEEE 2089.1 certification, for which the body provides the audit package in IEEE format, confirmation of scope, contexts and indicators, and the recorded limitations; the client submits to IEEE and meets its additional requirements, the two certifications remain separate and independent, and cross-referencing in either registry is with the client's consent and subject to IEEE rules.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.