Processing requires prior, express and informed authorization of the data subject (except Art.10 cases), obtained by any means that can later be evidenced.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.