What are expectations? Audit is invalidated by the first change after it, so archivation is basically necessary. VeraCrypt was audited too, lol.