Source profile
cncf.io
A field appears only when the current profile revision carries supporting evidence. Missing context stays visibly unknown.
The CNCF's argument is that the CLOUD Act reaches European soil, so "our servers are in Frankfurt" buys residency and not control. The boundary that holds is infrastructure you can run yourself.
Reality
A CNCF blog post argues Kyverno gets filed as an admission gate and then run at a quarter of its capacity. The teams getting returns are platform teams, not security teams.
Reality
A CNCF post argues the EU Data Act, NIS-2, DORA and the UK DUAA force platform teams to show isolation across control, runtime, build and observability planes, not just a region.
Reality
Multi-org maintainers at sandbox entry track a 2.07x graduation rate, and every graduated project that later concentrated lacked org-balance voting at incubation.
Reality
A CNCF blog account reports a self-upgrading K3s control plane on Kairos with etcd quorum intact. The instructive part is that both bugs were in the automation, not the OS.
Reality