The outsourced case is the one most enterprises will meet: a data owner hands inputs to a service that runs the protocol. That turns a cryptographic question into a supplier question. The buyer needs to know who garbles, who evaluates, whether the two are independent, and whether either can collude with an input party.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.