Where: the serious-incidents register

Article 73 requires providers to report serious incidents to the relevant authority within defined windows, which vary by incident category.

What to test

• Incidents are recorded with a category, and the category drives the window.
• The clock is visible: time elapsed against the window, not merely a date field.
• The lifecycle is forward-only — an incident cannot be quietly un-raised.

Why you may write here, and only here

Recording that a serious incident occurred is a factual act, not a determination about conformity. An auditor who discovers an unreported incident and cannot enter it is a worse outcome than the independence concern. So your account may raise and update an incident on this surface, while every determination surface refuses you.

If that reasoning does not hold up for you, say so — it is a deliberate design decision and we would rather argue it with you than have you find it undocumented.

A disclosed limitation

The reporting windows encoded here have not been legally verified against counsel's reading. Treat them as the product's interpretation, not as advice.