A controller that sells personal data or processes it for targeted advertising must disclose that clearly and conspicuously in its privacy notice and give access to a clear and conspicuous opt-out method outside the notice, such as a link labelled "your opt-out rights" or "your privacy rights" that effects the opt-out directly or leads to a page where it can be made.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.