Formal auditing strikes me as a completely unhelpful layer of bureaucracy. What is needed is a culture of sharing code and data (unless that is impossible due

Formal auditing strikes me as a completely unhelpful layer of bureaucracy. What is needed is a culture of sharing code and data (unless that is impossible due to restrictions on the data that was used), and the tools to allow this to happen. This is already happening, we just need more of the same. One issue is the incentive structure in many fields means that you only get rewarded for both collecting data, and analyzing it. Therefore there is a big incentive not to share data, since you get little or no credit when someone else uses your data.