To realize this auditing goal, it seems like everything running in a browser as a result of a pages actions should be put in a bucket that we can audit.
Web plugins would need to be audited in the same way as browser built-in stuff...Now how might we accomplish that?