Another option is that OTF approached CryptoCat, from where their options would be: a) don't do an audit - and the public would ask what they are hiding b) ag

Another option is that OTF approached CryptoCat, from where their options would be: a) don't do an audit - and the public would ask what they are hiding b) agree to an audit being done, meaning you 'commissioned' it. So it is just as important to know who approached who in this situation.