Keys are moved only in encrypted form, as at least two clear-text components or shares each of full key length, or held within an SCD. Clear-text components are carried in SCDs or in pre-numbered, authenticable, tamper-evident mailers; components that together could form a key go by separate channels, such as different couriers; serial numbers are sent separately and checked before use under documented procedures; where an SCD carries the component, the means of extracting it goes by another channel; and SCDs are inspected for tampering when they arrive.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.