The owner or operator must state the purpose of collection and processing precisely, and processing must match that purpose and the owner's or operator's material, technical and organisational capacity; data may be collected only for lawful, predetermined and declared purposes and processed by methods consistent with them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.