IME, regulatory compliance is something you are rarely able to test for in a nice little box or with well-known suite. So there's no easy "this complies" in many situations, no matter how many lawyers, compliance officers, and llm's you run it past.

so, whats the difference to human engineering?

other than there are "internal micro feedback loops" during development?