Simple Mr. casa
You approve,
You responsible if the approved product is deficient.
A later "audit" after-the-event, only proves your deficiency.
SIMPLE!! MR. casa!
Now where in the regs is the prosecution for an offence of "Strict Liability" for failure to approve a robust AOC??