Policy without enforcement is theater.

You can't audit good intentions.