audit: use the mark in handler functions