The organization formalizes a classification scheme for authoritative data sources (repositories that a data governance body names as the main or most trustworthy source for a given data domain) and their provisioning points, agrees each source's usage requirements, obligations, system integrations and provisioning points, educates stakeholders and consumers about them, and has procedures for finding, reviewing and approving further authoritative sources and provisioning points. Metadata makes each source discoverable by data domain with a definition of its scope (which may be limited by geography, product, business unit or period), and authorization status and scope are recorded in a central catalog. Any new source is designated non-authoritative until a review confirms otherwise, and all sources are reviewed periodically, with sources that no longer comply removed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.