I wonder if RISC-V would fall under this category. I saw recently that a decently powerful SOC was built and sold in small quantities. Is that architecture su

I wonder if RISC-V would fall under this category. I saw recently that a decently powerful SOC was built and sold in small quantities. Is that architecture sufficiently open (and simple) that a satisfactory audit would be feasible?