Establish a lawful basis for each processing operation, with explicit, written consent of the data subject as the default basis under Tunisian law, and document the consent capture mechanism for each collection point.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.