pub fn derive_audit(tokens: TokenStream) -> Result<TokenStream, Error>