FedRAMP manages a secure repository on USDA Connect.gov for offerings at LI-SaaS, Low and Moderate, holding authorization packages and continuous monitoring deliverables; agency AO representatives and their contractors request 60-day access through the Package Access Request Form to inform an authorization decision, with contractors signing the embedded nondisclosure agreement, and receive permanent access once their agency issues an ATO; providers at High must establish and maintain their own secure repository in an environment FedRAMP Authorized at High or fully owned, maintained and operated by the provider, with FedRAMP facilitating access through the same form but the provider provisioning and controlling it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.