Hello,
I am the maintainer of 'audit' in the official Arch Linux Repositories.
Is there a reason why you don't provide a signature file for the
releases nor a checksum or am I just stupid and can't find it on your
website:
https://people.redhat.com/sgrubb/audit/ ?
Best regards,
chris