When seeking or amending an authorisation, a data holder must not add requirements beyond those in the data standards and rules, provide or request additional information beyond them, offer additional or alternative services, or include or refer to other documents.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.