Start with the constraint that would stop a deployment.
Every buyer here arrives through a different first question, where the data may live, what happens when the link drops, or what the auditor will ask. The substrate underneath is the same one.
The three questions that actually determine the shape of a deployment are: where the data has to live, what has to keep working when the link drops, and who has to be able to prove what afterwards.