A KIF where any key or component appears in memory outside an SCD during injection has a physically secure injection room with solid or extended walls, alarmed and covered windows, a solid-core or steel door, electronic dual-access and anti-passback control with an alarm when one person is alone over 30 seconds, continuous CCTV covering the door, the SCDs before and after injection, safes and the equipment but never authentication entry, monitored around the clock with the recorder held elsewhere and images kept 45 days; from 1 January 2024 clear-text injection is not allowed for entities injecting on behalf of others and from 1 January 2026 for entities injecting their own devices, for POI v5 and higher, keypad entry on a PTS-approved device excepted.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.