Cyber Resilience Act

[Adam Wilson]

On Wednesday, 16 September 2026 at 19:49:42 UTC, Alexandru 
Ermicioi wrote:
> Well at least the code managed by DLF should comply as much as 
> possible with these regulations, even if org itself doesn't 
> provide any legal counsel, guarantees, or certification of 
> compliance with these rules, right?

I don't see how we could. The first invasive or API change to 
DMD/DRT/Phobos2 will be automatically vetoed.

The problem is that the moment that we say "We will try to 
comply" you create a binding legal declaration that you are going 
to comply with the regs and can be sued if we make a mistake.

Doing something half-way would be the worst of both worlds. All 
the legal liability, none of the rigorous compliance that would 
actually shield us from liability.