AI acquired externally attracts the same confidence that the directive's requirements are met as AI the MOD builds or commissions, and extra assurance capability is stood up where evidence is thin. Suppliers delivering into Defence understand the Defence context including information and operational security, MOD policies such as the ASR and JSP 887 on equality, diversity and inclusion, standards and operational contexts. Teams contracting for AI require suppliers to demonstrate competence to a confidence level commensurate with the use, for example the people, processes, experience and evidence needed to support the safety argument for a safety-related ML model.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.