HSMs, PEDs, ATMs and other SCDs, including those used for code signing or key injection, go into service only once there is assurance that nobody has substituted, modified, tampered with or misused them before deployment. In particular: every POI and other SCD is protected against compromise, any compromise is detected, and financial keys cannot be loaded or used after a compromise; POIs and other SCDs carry no default keys, no pre-installed test data and no default passwords or authentication codes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.