A manufacturer shall specify a detailed physical model of the practical QKD system and prove or verify to the user that the model corresponds to the physical system. The principles: list all assumptions explicitly across the optical, electronic and post-processing layers; verify every assumption; quantify deviations from the idealised model and account for them in privacy amplification, or where full quantification is not yet possible at least list the known specific attacks exploiting the deviation, perform them and measure their power; and base the proof on a refined model that accepts imperfections quantitatively (for example tagging multi-photon signals as known to the adversary).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.