audit-ready contract governance