Before every use, cables and the key-loading device are checked for signs of tampering; the device is booted from a powered-off state at the start of each session; the software writes no clear-text value to portable media or unsecured devices; clear-text keys are held only within an SCD; system administrators of the PC have no authorised access to the room (they may enter only under escort) and hold no credentials for the injection application; and injection staff have no administrative rights on the PC at either operating-system or application level.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.