CRA and DORA both treat the SBOM as evidence a regulator can demand on any given day. Most manufacturers have a file generated per build instead of a record they can query. Here's the identifier gap that breaks it, and the screens Phoenix built to close it.
This story is only covered by news sources that have yet to be evaluated by the independent media monitoring agencies we use to assess the quality and reliability of news outlets on our platform. Learn more here.