Join-Risk Audits: Catching Duplication Before It Ships