Media carrying components or shares for key loading are kept in secure storage that only the authorised custodians can reach; once taken out, they remain solely in the hands of the designated holders, for no longer than loading requires, and are protected throughout; components readable on paper, magnetic cards, PROMs or smart cards are never handled in a way that shows the clear text to anyone other than the custodian.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.