Where supervisory activities are outsourced, the supervisor sets expectations for the third party's role and work, monitors its performance, ensures its independence from the supervised entity and related parties, and binds it to the same confidentiality rules and professional standards as its own staff.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.