A key-injection facility logs every removal of keys, components or related material from secure storage and every load to an SCD, keeping the logs for at least two years after key destruction with date and time in and out, component identifier, purpose, the custodian's and a non-custodian witness's names and signatures and the tamper-evident package number.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.