Accredited data recipients and data holders must manage CDR data in an open and transparent way, including by having and publishing a CDR policy.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.