Instead of required separate auditing, there’s no confirmation your advertised RTP suits the software indeed powering