The purposes for which personal data is collected are specified no later than the time of collection. Later use stays limited to those purposes or to others not incompatible with them, and each change of purpose is itself specified at the time it occurs, so a purpose is never left open-ended.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.