audit
Whether this system audits its own account of itself once, as each replication ends.
On by default, and it covers the guide path underneath as well, because the two halves of an active model are not separately auditable in any useful sense: a vehicle that has lost track of its assignment and one that has lost track of the zone it is standing on are the same kind of failure seen from two sides.