I have literally never been in a situation [government/financial/etc] where there was nobody adjudicating the audit rules.

It is terrifying to think what people would do under those circumstances, root admins with what I'm imagining is little to know valid training.