> The blame trail should never terminate in the person who was told to do something or get fired - the blame trail should clearly indicate who ordered them to d

> The blame trail should never terminate in the person who was told to do something or get fired - the blame trail should clearly indicate who ordered them to do that. This blame trail (or trail of any kind like immutable logs for cert transparency, say) will most certainly be gamed (given a long enough time horizon) to ensure foot-soldiers are the ones in the line of fire. I don't think audits magically detract powerful entities from wielding their new-found power.