It’s very unclear who he’s referring to in saying the system has “auditability”. Be explicit Craig. Who gets to audit the source code and/or database exactly?

It’s very unclear who he’s referring to in saying the system has “auditability”. Be explicit Craig. Who gets to audit the source code and/or database exactly? And how is that done?