In a key-injection facility, key-generation and key-loading devices remain inside a secure room, where they are locked in a cabinet, sealed in packaging that shows tampering, or continuously supervised by two authorised people; POI devices may be secured by keeping them in the injection room, which is itself under dual control.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.