There is no one size fits all solution. These arrangements (and the agreement) are determined based on the parties involved and how they choose to interact with each other. Design Control is a process, interwoven with Risk Management, and the parties must decide who owns what deliverables and what level of oversight the customer has on the deliverables.