[Iv]

CE is typically obligation of result, not obligation of effort. Do you have source on products that can't be self-assessed?

[pimterry]

The article, directly referencing the proposed legislation, says:

> developers of critical products may not perform self-assessment and need to involve third-party auditors