Providing PI to another handler requires informing individuals of the recipient identity/contact, purpose, method and categories, and obtaining separate consent; the recipient must handle within that scope.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.