The documentation from the engagement should carry enough traceability to demonstrate that the validation or verification risk was brought down to an acceptable level; this is the recognised means of meeting ISO 14065 and may be met in an equivalent way if demonstrated to the accreditation body.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.