AI audit reports should document what evaluators did and did not test, enabling appropriately scoped conclusions and promises.

“You can't send one researcher in and say like, come back with whatever you find.”

“You need to be able to explain exactly what you did,”

“exactly what you tried, exactly what you did not try.”

“and therefore the kinds of promises you can and cannot make at the end of it.”