Critical CA functions are separated among people so that no one can misuse a CA system undetected, with multi-person control of operational procedures so that no single person gains control of the CA signing keys.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.