CSF

If the series has a point – that sovereignty measures can silently shift under you – this article is where it caught up with me. One of those measures shifted under it, after I hit publish, and I spotted it months after. Written against CSF v1.2.1; the June 2026 guidance changed how the overall SEAL level reads – update at the end. Still worth your time – most of it stands. One part has dated: the article flags that an overall SEAL could hide an extreme low; the new EU guidance has since fixed that. ...

A cloud that passed the sovereignty test, storage that passed it, a model on top that passed it too. Each piece certified, so the sum must be too. It isn’t necessarily. The sum may have parts no certificate covered – the pieces someone adds, the way they’re joined, the provider’s own dependencies, whoever operates the result. Any one of them can make the whole not sovereign. Sovereignty doesn’t add up from the parts. ...

Put the fifty best classical musicians in the world in one room and tell them to play. The first violinist knows exactly how the melody should breathe. The timpanist is right about the dynamics. The oboe is right about the tempo, and the cellos are right that the whole thing should be slower and darker than any of them are playing it. Every one of them is playing beautifully, and no two of them agree. What you get is not music – it’s fifty correct answers at once, and no one in the room whose job is to say which one wins. ...