Sovereignty
Sovereign data stays in the enclave that owns it and never transits the controlplane. The controlplane holds only platform metadata — identity, policy, audit of operator actions — and the design keeps even that minimal, pushing sensitive policy content down to the enclave and keeping only references centrally.