Verification establishes integrity; validation applies the verifier's business rules, including checks on credential type, credential subject, issuer trust, holder, issuance and validity periods, proofs, status, schemas, fitness for purpose, and 'artificial intelligence and machine learning' uses, which the specification leaves to verifier policy.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.