Article 17 sets the formal requirements for Article 14 requests (clear specification, proportionality, Article 15 grounds, publicly available rationale). Article 18 requires the data holder to comply with a duly substantiated request without undue delay, unless an Article 17(4) ground for refusal applies (data unavailable, request not meeting Article 17 requirements, etc.). Article 19 sets the obligations on public sector bodies receiving data: data minimisation, purpose limitation, security, deletion at end of the exceptional-need period, prohibition on commercial use, and on selling / sublicensing.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.