A data holder may refuse to disclose required product data only in circumstances set out in the data standards, and must inform the requester of the refusal in accordance with the data standards (civil penalty up to $50,000 for an individual and $250,000 for a body corporate).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.