Hi Kevin,
Yes, those auditing requirements are current, and can also be found on the NRL producer API specification. The old developer hub domain (where the legacy NRL API spec used to live) has been decommissioned (see thread here), but that doesn’t mean the services have been decommissioned yet. The NRL API catalogue documentation no longer contains any links to the inaccessible developer hub domain, but does link out to archived versions of this content in places.
Elizabeth