kaal:claim:7314479-048
An enterprise deploying a sovereign runtime does not need the underlying data to establish that policy was enforced, that data crossed only permitted boundaries, and that outcomes are attributable; it needs a durable artifact produced at execution time that a third party can evaluate without access to the content.
Source quote, verbatim
An enterprise deploying a sovereign runtime must be able to establish that policy was enforced, that data crossed only permitted boundaries, and that outcomes are attributable. It does not need the data itself in order to establish any of those things. What it needs is a durable artifact, produced at execution time, that a third party can evaluate without access to the underlying content.
From
Cite as
Holds when
Classification
mechanismsupport: arguedcompliancedisclosureinstitutional-design
Verify