We do not pre-emptively audit, but we informally audit code following a bug report