How to make evidence-traceability checklist audits pass/fail reproducible?