Reversible transformations are never used across levels of the key hierarchy: no working key such as a data-encryption key is derived from a key-encrypting key; they may only produce other key-encrypting keys from a KEK or differently purposed working keys from a working key.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.