Access to secret and private cryptographic keys and key material must be restricted to a small number of designated key custodians on a need-to-know basis with enforced dual control.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.