Article 17 enumerates the substantive authorisation criteria assessed by the competent authority (Article 5 application + Article 17 conditions): customs/tax good-standing for the preceding five years, financial and operational capacity to discharge CBAM obligations, no serious record of fraud or money-laundering. The competent authority may impose conditions and may revoke authorisation for breach of those conditions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.