Trust is ultimately enforced inside the bubbles, but that trust is sourced from multiple places and policies. The bubble decides who to trust for sources of accounts that are coming in - whether they're peers or something higher up in the system. Once the account is established within the bubble, the decisions happen locally.