Every certification engagement rests on an agreement that a court would enforce. It has to allocate responsibilities to both sides. On the client side the agreement must require continuing conformity with the certification requirements, including changes the body communicates. Where the certificate covers ongoing production, the product has to keep meeting the product requirements. The client must allow the evaluation and any surveillance to take place, including access to records, equipment, sites, people and subcontractors, and must allow complaints to be investigated and observers to attend where the scheme provides for them. Claims about the certificate must stay inside its scope. The client must not damage the body's reputation or make misleading statements, must stop using advertising that refers to a suspended or withdrawn certificate, must reproduce certification documents in full, must follow the mark rules, must keep and act on complaints about conformity, and must tell the body promptly about changes that could affect conformity.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.