The entity that issues certificates has to be capable of carrying legal responsibility for the whole certification activity. It can be a company in its own right, or a named division inside a larger legal person, provided the boundary of that division is defined. A government body is treated as a legal person because of its public status. The point is not paperwork for its own sake. If a certificate causes loss, a customer or a regulator needs a party that can answer for the decision, its scope and the conduct of the assessment. A trading name, a loose consortium or an unincorporated team does not meet the requirement.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.