To head off conflicts of interest the certification body refrains from at least three things: company-specific advice sold as consultancy; activities that amount to an audit in themselves or produce recommendations or advice at odds with 5.2.2.1, or that would be used to justify cutting the final certification audit time; and recommending particular solutions or giving advice on the AIMS, on AI systems, or on processes, services and products specific to AI. It performs no internal audits for a client it is to certify, and calling the work an inspection, an assessment or anything similar does not get around that ban. Pointing out opportunities to improve as they emerge in an audit, without prescribing solutions, is not consultancy.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.