Comment by twodave

This already exists. They’re called software audits, and the more risk-averse your customers are they more required they become.