After all, the proposal seems to be to see if a protocol was audited.
We can achieve that more simply, in fact:
- Auditors (personal or firm, whatever) create NFT to represent the audit information. Additional information like the issued date and a report link can be included in
ERC721Metadata. - Maintain an address registry of auditors on-chain.
What else do we need?