iso-42001 1 Who Answers to the Regulator? Mapping the EU AI Act and CRA onto the Cloud AI Trust Boundary Aug 2, 2026