When suspicious activity is detected, the POI device is at once removed, powered down or disconnected, and stays out of use until the problem is confirmed as resolved and P2PE encryption is working again.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.