We get AS9100 audits routinely. Also, for sub-tiers, we get customer audits.

The key card is fucking hilarious and I am going to give some friends some shit for that. But, no, every process isn’t fully audited constantly. Any employee in visual distance should have called that shit out, though. It’s not hard to get a feeler gauge stack or even a custom ground go/no go. Though would they know to check their feeler stack with a mic? Not likely if they think using a key card is reasonable.