A trust framework operator that wants to conform to this framework shall set concrete criteria meeting the requirements of every LoA it means to support, and shall evaluate each CSP that claims conformance against them. In the same way, a CSP shall work out the LoA its services meet by assessing its business processes and technical mechanisms as a whole against concrete criteria.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.