Governance-grade cryptographic infrastructure enabling jurisdiction-bound control and evidence-first access for regulated cloud/SaaS env.