The data subject has the right to be informed of any breach, violation or compromise of the security and integrity of their data; Article 20 sets the 24-hour notice where serious harm is likely.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.