Where information is to go to a Financial Information User with the customer's explicit consent, the NBFC-AA must verify the user's identity and, if verified, transfer the information securely to that recipient on the terms of the consent artefact.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.