The data subject may withdraw prior consent at any time; the controller must enable withdrawal (Article 8(F)) and erase or conceal data whose processing depended on it (Article 10(A)(2)).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.