A key that is known to be compromised is replaced. A suspected compromise is assessed and documented, and the key is replaced if the compromise is confirmed. All keys derived from the compromised key, or encrypted under it, are replaced as fast as is feasible; the replacement is never a variant or transformation of the original; and the compromised key is never used to distribute the new one. Known or suspected substitution of a key is handled in the same way.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.