A key-injection facility implements dual control and split knowledge for loading keys into POIs and other SCDs, through means such as a badge system that enforces at least two authorised people in a dedicated injection room at all times, multiple unique logins to the injection application so no one person can inject alone, applications that force entry of multiple components by multiple custodians who store and access them under dual control, procedures that forbid custodians handing their components to anyone else for entry, and separate loading devices per component.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.