A new audit standard gives firms time, but the messy part is already hiding in cash confirmations, third-party platforms, and client evidence trails.