Key-injection operations run against and are reconciled to an inventory of pre-authorised devices: each production run has a predefined inventory of identified POIs, which unauthorised personnel cannot alter undetected, every device loaded is accounted for against it, unauthorised devices submitted are rejected by the platform and investigated, and every submitted device, loaded or not, is accounted for afterwards, so that no authorised device can be substituted and no unauthorised device inserted into a run.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.