Third party audits should be part of the enforcement. And even then, those third parties should be vetted and have full daylight as to ownership, conflicts of interest, etc.