How do you write auditable PASS criteria for QA checklists?