Firms must be able to give clients on request written information on the type of AI system used, its basic workings and limitations, the due diligence carried out before use, how its risks are identified and managed, and the reliability decisions made about its outputs.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.