How should I structure a UI requirement audit with strict PASS/FAIL evidence?