When the Supplier buys in a critical item, a large share of the work, design work, a technically immature solution or a configuration item, it builds and keeps up its knowledge of that supply chain and of the External Provider's quality assurance activities. It flows down the applicable contract requirements, including the relevant AQAPs, by reference, and inserts in every purchasing document the statement that the order may be subject to GQA and that the External Provider will be told before any GQA takes place. It formally reviews purchasing documents to confirm correct flow-down and retains the review record, and documents these arrangements and proposed quality assurance activities for such sub-contracts at the planning stage. SRD.1: controls follow contract risk, not only past supplier performance; irrelevant clauses may be omitted from flow-down but the 4.3 access right always goes down. SRD.2: standard terms that cover the requirements comply if described in the Quality Plan, and the GQA purchase-order wording may be adapted there while GQA rights survive. Base clause: ISO 9001:2015 8.4.1 and 8.4.3 (general; information for external providers).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.