What lies upstream: The hidden risks undermining sovereign supply chains