The TSF enforces an access control policy over the objects and operations of the QKD modules, including requests for and export of QKD keys, according to the users' roles and security attributes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.