Controllers must not process the personal data of a consumer known to be a child except per COPPA, nor (per PA 23-56) process minors' (under 18) data for targeted advertising, sale, or certain profiling without consent, with additional minor-protection duties.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.