Yeah I remember something similar. It’s not just about coming up with a compliant architecture, but how to get there from what already exists. Of course authorities could say ”not our problem”.