The 72-Hour Rule: Why Point-in-Time Vendor Audits Fail in the Age of AI ExploitsDORA and NIS2 ReadyJune 5, 2026