Production and test keys are never shared or substituted: no production key exists in a test system and no test key in production, and where partitions of one HSM or platform serve both, the whole affected configuration is managed as production.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.