Outside a secure key-loading facility meeting this annex, a key-injection facility loads clear-text keys or components only with SCDs, never through ATM controller or HSM-attached keyboards, and any component, share or key-loading application that replaces or disables the evaluated firmware voids the device approval unless PTS-validated and listed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.