QKD protocols use a quantum channel, an authenticated classical channel and a physical (not pseudo-random) source of randomness, and run a quantum phase (prepare-and-measure or entanglement-based) followed by a classical communication phase. The security statement of an implementation combines a scientific security proof (for a model of the devices and the protocol run on it) with implementation verification that the real devices correspond to the model and that the protocol is implemented correctly, carried out to the best available engineering practice and yielding either pass or fail results or quantitative parameters entered into the proof.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.