Auditing EU Cloud and AI Chip Suppliers: Three Planes, Two Commands
The EU cloud sovereignty reports and the AI chip "trusted partners" line are a procurement signal, not an engineering spec. There is no published rule text, no thresholds, no effective dates, and no definition of "trusted". So this video audits what already exists: the three planes of a vendor inventory (data, control, support) plus the model provider behind your inference calls. Two commands show why an EU bucket region says nothing about who can delete the bucket — IAM is global by design. Then the residency versus operational-control split, and the key-revocation tests and dated exit drills that turn a sovereignty claim into evidence. Snippets use placeholder account IDs and a generic role name. No real credentials or vendors. Full write-up: https://hackyjs.com/posts/auditing-cloud-and-ai-chip-suppliers-for-eu-sovereignty-requirements