The arrangements that keep a human in, or over, the loop, the escalation routes, the monitoring alerts and the transparency and explanation features shown to users are tested for effectiveness under real operating conditions; the TEVV documentation traces each requirement through to its risks, the tests run, their results, the mitigations and the approvals; no high or critical risk remains unresolved; and leadership, risk, security and compliance owners formally sign off before deployment, any identified risk having been documented, mitigated and re-tested.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.