Each agency must assess every new AI use case against the Appendix C criteria to decide whether it is in scope, documenting the assessment and carrying it out during the design phase while requirements are being developed. Agencies must have begun these assessments within twelve months of the policy taking effect. For use cases already in place that have not been assessed, the agency must decide whether each is in scope and complete every applicable policy action no later than 30 April 2027. Agencies are encouraged to meet both deadlines earlier where practicable. The scoping assessment is distinct from the impact assessment that follows for in-scope cases; it must exist even where the answer is out of scope, because that answer has to be revisited on material change.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.