Thanks, after some research yesterday, this is where I was going.
I do like your approach of putting the owness on the author to provide proof of compliance rather than me having to prove the opposite. But this does give me some experience on best approach to reporting bugs.
Thanks!