tfw when an auditor says “I tried to find bugs in your code and couldn’t”