On-device execution can reduce exposure, but the trust question does not disappear when the region pin disappears. Operators still need proof of where state lived, who touched policy, and whether revocation actually propagated. The paper specifies verifiable state transitions as the trust layer, so sovereignty and privacy can be audited under real usage.