A public key's authenticity and integrity are ensured by encrypting it per Annex C or, if in plaintext, by holding it in an Annex A certificate, in a PKCS#10 request with authentication by other means, inside an SCD, or with an ISO 16609 MAC.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.