Records must be released to the public, including those in the hands of Cyber Ninjas, the private firm hired to do the audit.