The cloud security shared responsibility model has a gray area on cross-tenant isolation: the isolation mechanism is implemented and operated by the cloud provider, and customers can neither audit its code nor block the platform's internal trust transfer within their own boundary.