When a system's own audit output was mistakenly treated as a source-code change, every audit run invalidated itself the moment it completed. The fix wasn't excluding a folder — it was building a principled boundary between the thing being verified and the evidence describing it.

The problem

Any sy...