[cap-talk] Two questions on auditors

[Norman Hardy]

These may have been covered, so I will be brief:

If a new sort of auditor is invented, do I get to decide if you are  
allowed to audit an object that I built before the invention?
(I think the factory has no ex-post-facto dilemmas.)

Is it possible for an auditor to verify that there is no capability X  
(held by malware) to a component of what it audits, where X could be  
subsequently used to to damage the property that the audit vouched for?