The service auditor's firm signs the report, by hand or in print. (AT-C 205 .63, Guide Table 4-5)
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.