Personal data must be collected for a specific and clear purpose and not processed later in a way incompatible with it; further processing is allowed only where the purpose is similar or close to the original one.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.