The provider must isolate the model training environment from the inference (serving) environment, by physical or logical isolation, to prevent data leakage, improper access and similar security incidents.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.