How to Audit a Legacy Codebase in the First Week