Agencies should manage salts, encryption and decryption keys and token mappings across their lifecycle (generation, exchange, storage, use, replacement, destruction) and separate the people using protected data from those managing the keys.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.