What is the artifact provided to external auditors to prove a control was performed?

Which framework specifically models Trust Services Criteria (TSC) such as Security, Availability, and Confidentiality?