There needs to be a carve-out for open source software. The difference between open source software and other industries is that OSS is not "the bridge" -- it's

There needs to be a carve-out for open source software. The difference between open source software and other industries is that OSS is not "the bridge" -- it's the "blueprint for the bridge". Until it's in the process of getting deployed, it shouldn't be subject to fines or audits.