audit
Whether this system audits its own account of itself once, as each replication ends.
On by default. A subclass whose substrate has its own invariants extends this to cover them, because the two halves of a model are not separately auditable in any useful sense: a vehicle that has lost track of its assignment and one that has lost track of the space it is standing on are the same kind of failure seen from two sides.