Where processing is based on consent, the controller must be able to demonstrate that the data subject has consented, the request must be clearly distinguishable and in plain language, and consent may be withdrawn at any time.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.