The European Commission approved on 27 July 2026 the content of its Cyber Resilience Act (CRA) guidance, the most detailed interpretive document published so far on Regulation (EU) 2024/2847. Eighty-three pages, 67 worked examples, five flowcharts. Non-binding, but it is the reading that market surveillance authorities and notified bodies will apply.