On request from a market surveillance authority, an operator covered by Articles 7 to 10 must identify the other economic operator that supplied it with a product and the other operator to which it supplied a product. The information must be producible for five years after the operator was supplied and for five years after it supplied. That creates two clocks running in opposite directions along the chain. The Commission can extend the period for a specific product by delegated act, in proportion to the product's economically useful life, and any extended period must be longer than five years. The article is a traceability duty, not a general data-retention licence. Keep the minimum needed to answer the question: who, which product or batch, and when.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.