When the host device is manufactured, it must be able to take on the product supplier's keys and data that act as its roots of trust (one or more), and keep their confidentiality, integrity and authenticity protected.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.