A KDH exchanges messages with POIs solely for key management and routine transaction processing, and with CAs solely to have certificates signed and to check their status.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.