The operator obtains Verifiable Parental Consent by an approved method (e.g. signed consent form returned by mail/fax/electronic scan, government-issued ID matching, credit/debit/payment-card transaction, knowledge-based authentication, face-match-to-photo-ID, video conference, or other FTC-approved method) before collecting/using/disclosing child PI, with exceptions per COPPA 312.5(c).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.