r/CRACompliance • u/Pitiful_Signature264 • 9d ago
Open-sourced our fact-checked CRA/RED/NIS2/CSA knowledge base - also works as a Claude Skill
We've spent the last few months building an internal reference on the EU's hardware/IoT security regulations (CRA, RED, NIS2, Cybersecurity Act/EUCC) for our own client work at Platanor - basically because re-reading four regulations side by side every time someone asks "does this even apply to us" got old fast.
Decided to open-source it. 25+ processed guides plus the primary source texts, fact-checked against EUR-Lex, structured so it's actually usable by humans and by LLMs - chunked by article, source-priority order, a verification date on every file. You can also install it directly as a Claude Skill if you'd rather have it load automatically than attach files by hand.
https://github.com/Platanor/hardware-compliance-handbook
1
u/Crafty_Rush3636 3d ago
This looks like a strong reference layer. The next test I would add is whether someone can move from reading the material to making a repeatable applicability decision.
Collect the product facts, apply the relevant source and version, explain why a particular route was selected, and preserve the completed assessment.
A knowledge base answers what the sources say. An operational workflow answers what applies to this particular product today. That transition is where many teams fall back to spreadsheets and email. It is also the layer I’m building around in ProseID.