No person may process the personal data of a child below 16 unless the child's parent or guardian consents, and the controller must make every reasonable effort, taking available technology into account, to verify that the consent was given or authorised.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.