Auditing In A Dynamic Development Environment

Everybody knows that the standard for audits is to freeze the code before a review and audit the fixes in a separate frozen commit. But what happens when the project has a live system and is actively …