The certification body agrees and documents with the client the scope of AIMS certification: the organization's activities, the AI systems within the AIMS and the client's role toward them (AI producer or developer, provider, customer, partner or user, or several at once), and the sites and functions covered, so that the scope matches the AIMS as implemented and is not misleading (ISO/IEC 17021-1:2015, 9.1.1 and 9.1.2 on the application and its review). Accreditation bodies grant AIMS scopes by AI system role rather than by economic sector, and certification bodies ask the applicant to state its AI role in the application.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.