Before installation or update, any non-payment software on the device is confirmed to have no logical interface through which clear-text account data could be stored, processed or transmitted, to be authenticated within the device by an approved device mechanism, and to have been signed with an SCD under dual control.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.