Wherever components or shares are used they have the four properties below. In particular: knowledge of one component or share conveys no knowledge of any part of the key; building the key requires at least two components or shares; every component or share has one or more named authorised custodians; procedures ensure no custodian ever has, now or from past assignments, access to enough components or shares to reconstruct a key; in a two-of-three scheme a custodian may never have known two shares, and in a three-of-five scheme a custodian may hold two shares only if no other custodian's holdings combine with them to reach three.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.