Yes, the audit requests have been incorporated into the current version.
Ok, there's still this text in the NIP: > Encrypt-then-mac-then-sign instead of encrypt-then-sign-then-mac: only events wrapped in NIP-01 signed envelope are currently accepted by nostr. So is that not accurate any more?