Candidate audit reads protocol YAML, not free-form Python

[pavanamthomas]

The audit engine inspects declared split, preprocessing, and estimation fields. It does not parse an arbitrary candidate script.

This is a bound, not a bug. A Python AST checker would be a different laboratory.