An authentic record is one the organisation can prove is genuine on three counts: it is what it claims to be, the party named as its originator really produced or sent it, and the time it carries is the real time. The organisation documents and applies business rules, processes, policies and procedures that control creation, capture and management so authenticity can be shown, and records creators are authorised and identified.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.