Audits list scoped code, findings and fixes, not safety proofs. Learn severity, remediation checks and limits before trusting reports.