AI now writes a large share of new code, and most teams cannot say which parts. Here is a concrete audit loop — footprint, supply chain, permissions, agent boundary, disclosure — that you can run this week.