CRA and NIS2 compliance without slowing engineering — designing auditability into the development process.