Before internal auditors provide direct assistance, the responsible party confirms in writing that they will follow instructions given by the practitioner, and that it will not interfere in the work they do for the practitioner.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.