Sovereignty is a stack, not a slogan.

"Sovereign AI" is a fine marketing line. It's also easy to fake. If any of these four boundaries leak, you don't have sovereignty, you have a bill.

## The four boundaries

1. **Data** — does training or inference traffic leave your perimeter? Ever?
2. **Code** — is the serving stack inspectable, or is there an opaque vendor blob?
3. **Operations** — can you run the system without a vendor's staff?
4. **Models** — do you own the weights, or license them?

Miss any one and the claim is soft. All four is a harder bar than most 'sovereign AI' pitches admit. The good news: once you clear it, the claim sticks.