Articles 31 and 32: anyone may submit substantiated concerns about non-compliance by operators, downstream operators or traders; authorities assess them diligently and impartially, check and take interim measures where appropriate, inform the submitter within 30 days of the follow-up and reasons, and Member States protect the identity of persons who submit concerns or investigate compliance; persons with sufficient interest have access to administrative or judicial review of authority decisions or inaction.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.