Evidence a notified body accepted

The reviews were being done properly — the difficulty was producing evidence in a form a notified body would accept, per release, without a manual audit each time.

The existing answer was a spreadsheet assembled by a quality engineer over several days per submission.

Each of the twenty-four device modules became a path-based reviewer rule with a required approval count, so the right owners are assigned automatically and the merge stays blocked until the rule is satisfied.

Signed commits were enforced on protected branches, making the signature a property of the history rather than a claim about it.

Approval evidence stopped being a project and became an export.

Submission evidence is generated per release from the platform itself, with reviewer, rationale and signature attached to each change.