Clear-text keys and components enter an SCD only when cameras cannot see the entry, no mechanism at the interface between medium and SCD could disclose them, both sending and receiving SCDs have been inspected for tampering and for monitoring devices and for circumvention of dual control, and the SCD outputs a plaintext key only after uniquely identifying at least two authorised people.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.