When the customer specifies it, the organization purchases from customer-directed sources, and all the requirements of clause 8.4 except supplier selection (8.4.1.2) apply to the control of those sources unless the contract with the customer defines otherwise.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.