Compliance is not a one-off: Article 10(3) of the RED requires manufacturers to keep series production in conformity, taking account of changes in the product's design or characteristics and changes in the harmonised standards or other specifications the declaration refers to, which for software-defined radio equipment means every firmware release and every update to EN 18031 or its restrictions. Article 10(8) and 10(10) require instructions and safety information that let the user operate the equipment as intended, which for in-scope products covers the security-relevant settings the standards assume the user will act on (setting a password, enabling updates, guardian controls), and require a manufacturer who has reason to believe equipment is not in conformity to take corrective measures, withdraw or recall it, and inform the national authorities where the equipment presents a risk. Industry guidance recommends keeping a record of the security information supplied with each model and a change control process that re-checks the cybersecurity assessment before a changed product ships.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.