Seventy-four independent due-diligence processes, all compliant, none of which established whether the vendor patched its own front door.