Supply chain carbon footprint vulnerability — regulatory risk from emissions reporting requirements (EU CBAM, SEC climate disclosure) and transition risk from carbon pricing affecting supplier costs.