This process verifies that the framework is implemented in the organization and across its supply chain, and it shall verify that the intermediary protections of section 230 of the US Communications Decency Act, and similar laws elsewhere, do not stand in the way of giving children an age appropriate service. Inputs include the standard, documentation of who the suppliers are across the supply chain, tools to review suppliers for due diligence, a suppliers' compliance register, resources and staff to enforce the framework and a list of staff and roles for training needs. After the process the organization shall be able to show that the framework is explicitly adopted and implemented; that the supply chain behind the service is reviewed and confirmed to offer age appropriate digital services; that employees in design, governance and procurement roles are identified and trained in child-compliant design; and that childhood's protections and privileges, and the rights of children, are understood and applied as a matter of course in design and business decisions, as the corporate norm.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.