That last one deserves its qualifiers rather than our applause. The agreement says it is not intended that the auditor investigate the conduct that gave rise to the case. Meta may challenge the auditor's costs as excessive or duplicative. The workplan may be modified by agreement of the auditor and Meta, with the states holding a twenty day objection window. And the reports are confidential, with no requirement that any of it be published. An auditor on those terms is still worth having. It is not, on its own, the difference between a promise and a record.