Certificates are managed through a defined process: initial certificate creation (often a manufacturer certificate), onboarding of an entity into the operator's domain, enrolment through certificate signing requests processed by the CA using standard enrolment protocols (EST, SCEP, CMP), and trust anchor management (TAMP) to update the anchors devices trust.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.