When the project acquires or uses a commercial, Government, modified off-the-shelf, open source or reused software component, the project manager ensures the requirements it must meet are identified; it carries documentation sufficient for its purpose; proprietary, usage, ownership, warranty, licensing, transfer and conditions of use (including required notices and copyleft terms) are addressed with Center Intellectual Property Counsel; future support is planned and adequate; it is verified and validated as thoroughly as a developed component for the same use would be; and there is a plan to periodically assess vendor-reported defects for impact.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.