I mean, isn't the whole "you gon' get audited for decades" bit about how this usually goes? The audit is the actual teeth here, if the auditor finds issues any time in the next decade, they start assigning fines like in the 10k per infraction per day-not-yet-fixed range or something.