Option 3: Internal Audit Expansion

You moved the concern into a larger formal audit process.

A formal audit mandate is issued. Requests begin for documents, approvals, communications, and attribution. The organization gains procedural defensibility, but the environment changes quickly: conversations become more guarded, language becomes more careful, and more people start copying more people “just in case.”

What you protected is formality. What you put at risk is contributor safety, pace, and candor.

The audit process creates a record, but it also pulls more people into visibility before protections and scope are fully designed. The inquiry becomes heavier before it becomes clearer.

Observer-12 cools sharply. They may see the process as a machine that can absorb the concern while increasing their personal exposure and reducing their control over how the story spreads internally.

By late afternoon, you have created documentation, but not enough clarity. The institution is moving more slowly just as external pressure is accelerating.