Each custodian's components or shares are in a separate secure container that only that custodian and designated backups can open; desk drawers and furniture locks do not qualify, nor do separate envelopes in a shared container.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.