The data subject may withdraw consent at any time; withdrawal does not affect the lawfulness of processing before it, must be as easy as giving consent, and takes effect from the date the data subject applied for it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.