A controller entrusts processing to a processor only by written contract, and the processor processes only for the purpose and volume set in the contract; a processor for a state or local government body can only be that body or a state or municipal enterprise.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.