The audit package generates itself.
Produces governed audit deliverables — RCMs, MCLs, walkthroughs, and audit plans — in seconds from a live star schema.
One operator · One council · The audit package generates itself.
AuditForge is a system of structure — not a system of execution. It defines what the control is. The auditor issues the opinion. AuditForge produces the evidence package. That line does not move.
BY THE NUMBERS
106
controls
9
process areas
17
risks mapped
4
document generators
45
auditors
9
teams
4
FY2025 engagements
1,099
time entries
✓
live analytics dashboard
✓
engagement orbital
<30s
to package
MARCH 13–14 — THE RECEIPTS
One person. Two days. One thread.
No code existed before March 12.
Day 1 · 9:30 AM
Sat down. AuditForge existed as a database with API routes. No UI. No documents. No brand.
Day 1 · 9:45 AM
Natural ID resolution deployed. CO-DDL works. The API now speaks your language, not the database's.
Day 1 · 10:15 AM
First RCM generated. Not a mockup. 11 live controls, risk mappings, COSO references, PCAOB assertions. Three sheets. Under one second.
Day 1 · 10:45 AM
DDL Excel standards codified. 6px spacer frame. Grid off. Footer on every page. Copper accents. Rebuilt into all generators.
Day 1 · 11:15 AM
All three generators rebuilt from scratch. RCM, MCL, Walkthrough Narratives. 7 documents. All branded. All governed.
Day 1 · 11:45 AM
Full web UI shipped. 5 views on live data. Dashboard, Controls, Risks, Processes, Generate. CottageHumble throughout.
Day 1 · 12:00 PM
Brand kit complete. DDL + AuditForge. All SVG. Council-ratified Crimson AF seal as primary mark. CrimsonAF entered the canon.
Day 2 · Morning
v0.4 planning layer. Audit engagements, scope matrix, lead auditor, Audit Plan generator.
Day 2 · Afternoon
Bulk import UI shipped. Three-step flow. Controls, Risks, Processes. Auto column mapping. Row-level validation.
Day 2 · Afternoon
Global search Cmd+K. Searches controls, risks, processes simultaneously. Results grouped, text highlighted.
Day 2 · Evening
Analytics dashboard shipped. Council-ratified KPIs. Control health heatmap, workflow funnel, coverage rate.
Day 2 · Evening
auditforge.dev registered. Live on Vercel. Auto-deploy from GitHub. The product has a home.
APRIL 11, 2026 — THE NEXT LAYER
April 11 · Morning
Full codebase audit. Every bug found and fixed — auth middleware that had never run, regex validators broken since day one, mojibake in the schema, duplicate records in the database. Zero known bugs going into the next build.
April 11 · Afternoon
Auditors roster shipped. 45 auditors across 9 teams, grouped by team, sorted by role. Basketball card modal with 8-axis SVG radar chart. ‘How am I getting better?’ framing. Hover tooltip with top strengths before you click.
April 11 · Evening
Engagement Orbital shipped. 6-node SVG orbital showing team, controls, budget, timeline, and process areas for each engagement. Click any audit — see the full picture. Four-panel detail view: Team Roster, Controls in Scope, Engagement Details, Engagement Analytics.
April 11 · Evening
1,099 time entries seeded across 4 FY2025 engagements. Realistic hour distributions, 3-tier staffing model, natural variance. Time Analytics dashboard live: 7,777.9 total hours, 7,516.9 billable, by-auditor, by-component, by-engagement, monthly trend.
"The product demos itself governing itself. The demo data is DDL's own Control Audit Engine. The audit plan you generate will scope DDL's own controls for review by DDL's own auditor using DDL's own product."
CR-AUDITFORGE-003 · 2026-03-13
WHAT IT DOES
Define
Star schema. Fact_Control at center.
106 controls · 9 process areas · 17 risks mapped.
47 auditors with verified skill tokens.
4 engagements with full team and scope management.
Effective dating on all relationships.
COSO 2013, SOX/PCAOB, COBIT 2019.
Generate
RCM01 — Risk & Control Matrix.
MCL02 — Master Control Log.
WALK03 — Walkthrough Narratives.
PLAN04 — Audit Plan.
XLSX and DOCX. Under 30 seconds to package.
Govern
Draft → Prepared → Reviewed → Approved.
Silent Fix Prevention at system level.
Audit trail on every mutation.
Segregation of duties enforced.
CANON TERM
SystemOfStructure
Not execution. Not opinion. Structure.
THE FIRM
45 auditors. 9 teams.
Ratified competency profile. One council seat per director. Every engagement is staffed from a governed roster.
Archer HawthorneSEAT 1001
Marcus CaldwellSEAT 1002
Elias MercerSEAT 1003
Max SullivanSEAT 1004
Rowan BennettSEAT 1005
Ava SinclairSEAT 1006
Leo PrescottSEAT 1007
Marcus GreySEAT 1008
Kai LangfordSEAT 1009
THE OPERATING SYSTEM
Controls
The universe of what gets audited
Teams
Who does the work, verified and profiled
Time
Hours tracked, billed, and analyzed
Utilization
Budget vs actual, billable percentage, capacity by engagement
Capacity
Coming next
Revenue
Coming next
AuditForge started as a document generator. It became the operating system the document generator lives inside. The star schema holds all of it.
The architecture does not change. The data does.
NO AI REQUIRED
Core is deterministic.
Structured data in, governed documents out. No black box. No hallucination risk. No AI dependency. An optional AI acceleration layer is planned for a future premium tier — but the core product works fully without it.
BUILT BY AN AUDITOR
10 years of audit. One product.
The dimensional model reflects real audit methodology — not a software engineer’s approximation of it. The 6px spacer frame, the grid-off standard, the copper accent dividers: those came from a decade of knowing what professional output actually looks like.
Dave Kitchens, CPA · Dropdown Logistics
ReasonedHype.
Enthusiasm with receipts. The forge produced its first steel.
AUDITFORGE · A DROPDOWN LOGISTICS PRODUCT
Chaos → Structured → Automated