Further processing stays within the original specific purpose, judged on the link between purposes, the nature of the data, how it was collected, the consequences for the data subject and contractual rights; it is compatible where the subject consents, the data is public, it is needed for law enforcement, revenue, court proceedings, national security or serious threats to health or safety, or for historical, statistical or research purposes without publication that reveals identity.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.