Appearance
Appendices
Appendix F: Sovereignty Evidence — Grant/Deny Table
Source: §7 Pattern 9: The Compellability Predicate. This page is the same table, published standalone so it can be cited on its own.
Cite as: Zero-Trust Octagon, Appendix F, Compellability Predicate v1.0 (2026-10).
Axiom 7: unattested data may only deny, never grant. Each input below is classified by what it can do to a sovereignty verdict. GRANT-capable inputs are cryptographically verifiable and revocable by a supervisory body. DENY-only inputs are contracts, declarations, or revocable administrative acts: they can fail a claim, never pass one. Allowlist only inputs gate which components are admissible and never act as a runtime grant.
| Class | Input | Why |
|---|---|---|
| GRANT-capable | eIDAS 2.0 (Reg. (EU) 2024/1183) QTSP certificates, qualified seals, qualified timestamps | Cryptographically verifiable; issuer revocable in real time by a supervisory body |
| GRANT-capable | QEAA verified against the EU Trusted List | The only real jurisdiction anchor: revocable, legally binding, machine-checkable |
| GRANT-capable | CRA-mandated signed SBOM, in-toto / SLSA build attestations | Artifact provenance — not jurisdiction |
| GRANT-capable | HSM non-exportability attestation chaining to a Trusted List QTSP | Proves the key cannot leave the module |
| DENY-only | GDPR Ch. V SCCs, transfer impact assessments | Contract, not proof |
| DENY-only | EU–US Data Privacy Framework adequacy | A revocable Commission act — a cache entry with no expiry semantics (fails Axiom 4) |
| DENY-only | EUCS sovereignty tier | Immunity requirements removed from the draft; scheme unadopted as of 2026-09. Adjacent instruments (Cloud Sovereignty Framework, CADA) are non-binding |
| DENY-only | Data Act (Reg. (EU) 2023/2854) Art. 32 safeguards | A promise to litigate |
| DENY-only | NIS2 / DORA registers of information, subcontracting RTS | Self-declared |
| DENY-only | Gaia-X labels | Self-declaration |
| DENY-only | Provider-managed CMK "in eu-central-1", residency toggles, "sovereign cloud" run by a non-EU-parented subsidiary, EU-resident support staff without a customer-held approval key | The provider holds the key. Region is a billing and latency property, not a compellability property |
| Allowlist only | EUCC (Reg. (EU) 2024/482) / Common Criteria certificates | Gate which HSM and TPM models are admitted; never a runtime grant |
Scope boundary. This table classifies evidence. Whether a given law reaches a given entity is a legal conclusion for counsel, not an output of the method.
Change control. Rows change only with a version bump of the predicate. Report footers cite the version they were evaluated against.