When entrusting handling, the handler must agree purpose, period, method, categories and protection measures with, and supervise, the entrusted party; the entrusted party may not exceed the agreed scope and must return or delete PI when the entrustment ends; sub-entrustment requires consent.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.