[djellybeans]

I suppose it has more to do with developers dealing more with logical systems than with physical and legal systems that have more direct and immediate consequences. In the case with doctors and lawyers, a bad process will have a more visible impact. In software, there's lots of "bad code" that still operates with the expected outcomes, regardless of the processes used (or ignored) that took them there.

Auditing and forensics does seem to get applied more frequently in cryptocurrency projects, but as you said, that sort of accreditation still has to be meaningful.