The Long Return Institute

Reusable report structure

Audit Review Report template

Use this template to record what you reviewed, what you found, and what you could not establish. It is not a certificate of approval.

Template only. Replace the bracketed prompts with the actual agreement, observations, evidence, limits, and responsible reviewer record. Do not issue an unfilled template as a completed report.
Download Word templateDownload Markdown template →

Report record

[Report ID] · [version] · [date] · [distribution: private / separately authorized public copy].
Prepared for [requester or approved identifier]. Responsible reviewer: [name]. Human sign-off: [pending / name and date].

1. Summary finding

[Answer the agreed question in ordinary language. Identify strengths, the main concern, and the supported readiness limit. A favorable verdict is not guaranteed. Do not imply certification.]

2. Scope, identity, and access

[Agreement ID/date; review question; audience/use; exact file/page set, version, date, digest or preserved snapshot; supplied and actually accessed material; included checks; excluded checks; time/source cutoff. Do not imply full access from a filename or summary.]

3. Findings and evidence

[Repeat one record per finding: F01; exact location; relevant claim or function; evidence and actual access; reasoning; importance to stated use; necessary correction / unresolved question / optional improvement; recommended repair; verification needed; confidence and limits. Record strengths and “not established” results too.]

4. Repair and recheck checklist

[For each action: finding ID; specific task; responsible owner or “not assigned”; agreed due date or “not agreed”; evidence needed for closure; status: open / claimed repaired / rechecked / not tested. A proposed change is not a verified repair.]

5. Sources and tests

[Source ID, title/version/date, exact locator, access method, access extent, checked date, use in findings, unresolved limitations. List actual tests and results separately from planned tests. Record independent, external, human, live-host, and physical-print checks only when performed.]

6. Method, permissions, and assistance

[Exact Audit packet, status, digest, owner-selection record; use context and privacy authorization; material AI provider/tool and scope actually used; what was not sent; consent/venue requirements; reviewer conflicts and management; final responsible human judgment. Do not silently promote a candidate.]

7. Limits and next step

[What the report does not establish; unresolved expertise, authority, protection, source, human-use, or operational checks; narrowed/referral/stop decision if relevant; actual next action and who decides. No promise of an approval badge or official authority.]

8. Delivery, correction, and retention

[Agreed private delivery route and recipients; report version/digest; delivery confirmation; correction contact; how to challenge a finding; correction vs new-scope re-review; next version/supersession note; agreed retention/deletion dates and exceptions. No public reuse without separate permission.]