How do we evidence sponsor oversight of a CRO?

Through documented decisions rather than assurances. Inspectors look for evidence that you selected the vendor deliberately, defined the split of responsibilities in writing, monitored performance against it, and acted when something went wrong. Oversight procedures exist to make that trail a by-product of how you already work.