When data is collected, the data subject must be informed of the purpose, recipients, existence of the database, controller identity and address, mandatory or optional nature of responses, consequences of refusal, and rights of access, rectification, and suppression.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.