Ask for access to another company's audit, and notify its owner. A public audit is granted on the spot (no notification). 404 when the audit does not exist; 409 when it is the caller's own (audit_belong_to_company), already shared (audit_already_shared) or already requested (audit_already_requested). The notification is best-effort: the request is recorded even if it cannot be published.