Embed the NIST SP 800-145 cloud definition into procurement standards, vendor questionnaires, and service catalogue intake. Procurement evaluation must score every candidate against (a) presence of all five essential characteristics, (b) declared service model SaaS PaaS IaaS, (c) declared deployment model private community public hybrid. Procurement contracts and statements of work must include the cloud-definition conformance clause, the right-to-audit conformance evidence, and the obligation to notify the consumer of any change to service-model or deployment-model declaration. The service catalogue must record the cloud-definition triple (characteristics, service model, deployment model) for every active service.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.