Dumb question : I’m wondering how does this get auditable? Perhaps some kind of verifiable hash of a defined (open source)function + timestamp ?