[ska]

  you wouldn't qualify for SR&ED because you were successful, so there was obviously no risk involved,

There are all kinds of risks you face that have nothing to do with SR&ED.

I'm not surprised you had a difficult audit if you were talking about things like "explaining polymorphism and encapulation" - sounds a description of activities in software development that are clearly not SR&ED-able.