In transit, every clear-text component or share is always either continuously supervised by a person authorised to handle it, sealed in a security container or a pre-numbered tamper-evident authenticable mailer that only an authorised person can open without leaving evidence, or held inside a physically secure SCD; no single individual can reach every component or a quorum of shares.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.