Controllers shall maintain a record of processing activities including categories of data, purposes, recipients, retention, security measures, and rights mechanisms.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.