ASPSPs give customers authentication journeys through TPP-initiated flows that are no harder than their own channels (app-to-app redirection where the customer uses the app, no unnecessary screens or warnings that deter use), and TPPs present clear consent requests for data scope, duration and payment details, following the customer experience guidelines and checklist.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.