Which EU rules apply to your solution, and whether that still holds.
Answer questions about what you have built. Get a deterministic reading across the AI Act, the Cyber Resilience Act, the GDPR and NIS2, with every finding citing its provision and its date, and the places where two instruments collide named rather than left to you.
The instrument
Deterministic, cited, replayable
The same facts always produce the same findings. Every rule is published and arguable, and there is no model whose reasoning cannot be inspected. Every rule names the provision it comes from and the date it binds, and what was read to verify it is published rule by rule. An assessment becomes a link that replays under any later ruleset and states what changed.
The assessment itself runs on its own page, which carries no measurement of any kind, because a shared assessment travels in the part of the address a browser never sends anywhere.