Region routing enforced in code, not policy.

How the routing layer guarantees data residency at the TCP socket level — and why the policy PDF isn't enough.