Fix audit of user confirming run

This is currently shown as being confirmed by system