The certification body has a policy and procedure under ISO/IEC 17021-1:2015, 9.6.5 for suspending certification where the AIMS persistently or seriously fails to meet requirements (including surveillance not permitted or requested by the client), for withdrawing it where suspension is not resolved in time, and for reducing scope to exclude parts, such as AI systems, that fail the requirements, with certification documents amended and the status made public.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.