A policy-centric zero-trust and privacy-preserving reference architecture for cross-border digital education, evaluated through a transparent analytical rubric, a 3,000,000-request synthetic policy experiment, privacy-utility and registry-staleness sensitivity analyses, and a reproducible single-host microbenchmark. If you use this research artifact, please cite the article and the archived release identifier when available.