recursifist comments on Auditor-in-a-Box: Tools for Third-Party Auditing