A log entry contains at minimum: the action (the event or operation), the object affected (file, process or system), the result, the origin (device or network location), the actor (the person or process that caused the event) and a time stamp.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.