In-house assurance can cover any investigative process the organization will deploy internally: it uses a validation set reflecting its own intended uses, runs the relevant tests and records fitness for purpose through formal confirmation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.