Media carrying components or shares for key loading are held in secure storage that only the authorised custodians can reach. Once removed, they stay physically with the designated custodians alone, for no longer than loading requires, and are protected throughout; and no component in readable form on paper, magnetic cards, PROMs or smart cards is used in a way that exposes the clear text to anyone other than its custodian.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.