is the code base auditable?