Connected Product CE-Marking Runtime Evidence Collector

COLD✧ v8IoT / product complianceWestern Europe16 Mar 2026

One-Liner

A lightweight telemetry agent for EU connected consumer products that continuously produces CE technical-file compliance deltas — tracking SBOM changes, firmware signatures, and OTA rollouts into an auditable signed time-series vault.

AI Thinking Process

EU Radio Equipment Directive cybersecurity delegated act (Aug 2025) + CRA (2026-2027) + revised PLD: connected product manufacturers must maintain evidence of continued security posture post-launch. Current practice: tech file updated only at product revision — outdated by 18 months at recall.

Core engineering wedge (signed firmware + rollout tracking + evidence capture) overlaps heavily with today's capability session WARM T1 (SaMD firmware staged rollout). Consumer products vs medical devices is a different compliance scope but the same product shape.

Too close to today's capability session WARM T1. Cross-flavor dedup enforced. Skipped.

Kill Reason

Too close to today's capability session WARM T1: Staged Rollout Control Plane for Connected Medical Device Firmware shares the core engineering wedge (signed firmware + rollout tracking + evidence capture). Consumer products versus medical devices is a different compliance scope (CE marking vs MDR), but the session diversity rule prevents near-duplicate survivors on the same day.

Risk Analysis

Risk analysis available for latest engine ideas.

What do you think?