A decline may carry a permitted reason only where revealing it does not breach confidentiality, and no reason is required. The caller must not be able to tell from the response whether a record exists that they may not see.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.