Every function that implements a risk control measure, basic safety or essential performance is verified under a verification plan that states at which milestones each function is verified, the verification strategies, activities, techniques and the level of independence of the personnel, the tools used, and coverage criteria (methods include walkthroughs, inspections, static and dynamic analysis, white box, black box and statistical testing); verification is performed to the plan and its results documented.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.