Assurance
Audit history
Published in full, including the round that was refused and the findings that were embarrassing. A history with no findings in it would be a history nobody looked at.
Who audited
An independent internal audit function
Every round was run by a separate audit function inside RODMENA that did not write or merge the application code, working from the principle that a claim is false until re-run live. Gate D, the readiness gate, was signed off on 2026-08-06. A mission-critical certification followed on 2026-08-06 with 0 code findings. The rounds since treated those sign-offs as claims to falsify, and found things.
The rounds
Every round, oldest first
12 rounds · 72 findings recorded · every one fixed and re-verified · all internal.
-
2026-08-05 · ticket #3
Gate A — schema fidelity
8 findings, all fixed after the first pass was refused and the re-audit passed.
-
2026-08-05 · ticket #6
Gate B — the money path
0 findings, signed off clean.
-
2026-08-06 · ticket #7
Gate C — workers and reads
0 findings, signed off clean.
-
2026-08-06 · ticket #9
Gate D — readiness for service
3 findings, provisional first, signed off after fixes.
-
2026-08-06 · ticket #33
Mission-critical certification
0 findings, no code findings, and one operational finding resolved before sign-off.
-
2026-08-07 · ticket #34
No-trust audit, round 1
26 findings, all fixed and now guarded by probes.
-
2026-08-07 · ticket #38
No-trust audit, round 2
7 findings, all of them fixed.
-
2026-08-12 · ticket #52
Race, timing and zombie-process audit
5 findings, all of them fixed.
-
2026-08-13 · ticket #54
Pre-production bug hunt
6 findings, all fixed and probe-verified.
-
2026-08-22 · ticket #72
Metering, error mapping and authorisation audit
5 findings, all of them fixed.
-
2026-09-04 · ticket #87
Forensic audit series
8 findings, all of them fixed.
-
2026-09-04 · ticket #96
Second-pass adversarial audit of the fixes
4 findings, all fixed, the last on 2026-09-05.
Findings counts are the auditor’s own numbers as recorded on the tickets named. Where a round produced follow-up tickets, they are counted with it.
How to read it
Three things the pattern shows
Refusals are recorded
The first gate was not signed off. That is the strongest evidence that sign-offs mean something.
Green suites still had defects
Several rounds found live defects while every test and probe was green. Each finding became a permanent probe. The suite grows with what it missed.
Fixes are audited too
The latest round treated the previous fixes as claims and falsified some of them. Nothing is “fixed” until the auditor re-runs the original reproduction.
Want the underlying records?
Ask and we will walk you through the tickets, the probes and the reproductions behind any line above.