Components and shares are stored securely. In particular: each clear-text component held outside an SCD is sealed on its own in packaging that is opaque, tamper-evident, authenticable and pre-numbered, so that nobody can read it, including by embossing or contactless means, without leaving visible damage; each custodian keeps their components or shares in a separate secure container that only they and designated backups can open; furniture locks and desk drawers are not acceptable, and neither are separate envelopes inside one shared container; where a share sits on a token protected by an access code, only the token's owner and designated backups hold both the token and the code.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.