Organization-wide CloudTrail is enabled but one region never uses the expected KMS key

Audit logging exists everywhere, yet one region violates the encryption standard because replication and key policy assumptions drifted apart over time.