The plan should set out how outputs that do not conform are identified and controlled so they are not used by mistake until they have been properly dealt with or accepted under concession. It may need to set particular limits, such as how much or what kind of rework or repair is permitted and who authorizes it. Where a service is delivered at the point of contact with the customer, stopping the use of a nonconforming service output may be impossible; in that situation the plan should, where relevant, define or cite the actions and communications suited to the actual or possible effects of the nonconformity.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.