Validate and verify the presented identity evidence through agency-defined resolution, validation and verification methods, and for credential service providers meet the Policy's embedded SP 800-63A identity proofing requirements: proofing not used to determine suitability, explicit notice and consent at collection, redress mechanisms, a written practice statement, records and audit logs of every proofing step and the evidence types, a privacy risk assessment, protection of collected PII, obligations on ceasing proofing, and, for IAL2, the evidence strength, validation, verification, enrollment code and, where used, supervised biometric collection rules.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.