Generation and evaluation are split in the contents for a reason: different parties do them, and often different vendors supply them. The general evaluation subclause is where a buyer should look for the evaluator's inputs and outputs, because those are the points where a supplier boundary becomes a trust boundary.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.