Processing of sensitive data requires the controller to obtain freely given, specific, informed, unambiguous, opt-in consent from the consumer, or for known children process in accordance with COPPA.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.