THE SOVEREIGNTY GAP
Administrative control is not sovereign control.
You configure IAM roles. You set storage policies. You monitor access logs. But cloud providers retain material control over replication behaviour, data locality mechanics, logging planes, jurisdictional exposure, and deletion semantics. That gap becomes visible only when incidents happen.