Systems that process certificates online run host-based or network intrusion detection, or both, which at a minimum covers the database servers, the RA and web application servers, and the network segments that connect them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.