A consumer may withdraw an authorisation through the data holder's dashboard or through a simple alternative method of communication the data holder must make available; where withdrawal is by the alternative method, the data holder must give effect to it as soon as practicable and within 2 business days (civil penalty).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.