The useful test for sovereign cloud is not a flag on the region field. It is whether operators can prove where data moved, who changed policy, and how access was revoked. The paper specifies verifiable state transitions as the trust layer. That makes sovereignty something teams can audit, not just a promise in a product page.