A set of rules identifies rights of access and the permissions and restrictions that apply to records. Categories are based on appraisal results, in particular identification of agents and records requirements, and rules are associated with agents, business activities and records, applied to at least records and agents. Systems allow ongoing review of rights, and rules are monitored and updated routinely as legal, business and societal conditions change, with restrictions reduced or removed where appropriate.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.