Any key-generation output in clear text is subject to dual control: each custodian sees in clear text only the components or shares assigned to that custodian, and never the complete key.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.