Function audit 

pub fn audit(
    repo_root: &Path,
    contract: &Contract,
    facts: &Facts,
    fs: &dyn Fs,
    cmd: &dyn CommandRunner,
) -> AuditReport

Score the repo at repo_root against its contract and detected facts.

Pure over its inputs and read-only over the repo: filesystem probes go through fs; the GitHub community-standards lookup goes through cmd (git remote get-url origin then gh api …/community/profile). Never mutates anything.