Taken into Part 2 in CC:2022: a dedicated function brings the TSF up in a correct, secure operating state, verifying what it loads and refusing to start if verification fails. One component: FPT_INI.1 TSF initialisation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.