A host MFK and its variants, which encipher keys held in local storage, are used only within the logical configuration in which the MFK resides, and never elsewhere, for example to carry keys between platforms that run under different security and operational policies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.