[qa] Gerrit breach and commit audit