Lesson 3.3: High-risk classification — the two routes and the derogation - The Security and AI Institute