Cryptographic keys are managed and protected in line with security regulations and policies, with key management on storage enforced and keys kept in the B/D's custody. The lifecycle is defined from generation through use, storage, backup, recovery and rotation to deletion. Key handling and cryptographic operations may be tied into identity and access management, and a key is never re-used across cloud platforms, so that one compromise cannot reach every platform, especially in a hybrid cloud.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.