Articles 15 and 16: where processing rests on consent the controller must be able to show it; a written consent request covering other matters is distinguishable, clear and plain; consent can be withdrawn at any time as easily as given, and the person is told of this beforehand; making a contract conditional on unnecessary consent weighs against freedom; a minor aged 15 or over may consent alone to information society services, below 15 a parent or legal guardian must consent and the controller takes reasonable steps, given available technology, to verify it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.