A key generated by a reversible process from another key, such as a variant, is protected like the original under dual control and split knowledge; variants may serve different purposes but never different levels of the key hierarchy.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.