There have been reports to the contrary. I assume that whatever report Cyber Ninjas issues with their findings will detail the chain of custody from their end.
Moreover, it should not matter. Voting machines which are certified by the US government must pass tests that determine if all of the software present on the machines is exactly the same as the software provided to the US government approved testing lab.
Isn't that one of the questions this whole Cyber Ninja audit is supposed to clear up? Whether or not there was software on the machine that escaped the government tests? Even if none was found during the audit there is no way of guaranteeing software wasn't added when the machine was out of the hands of the Maricopa County officials. Far safer to scrap the machines and replace them.
Your statement is incorrect. The entire process of certifying voting machines and trusting them at all depends on being able to verify that the software loaded on the machines is the same as the tested, certified software. Nobody is depending on the county officials to somehow be magic guardians of correctness. How would they do that?
In reality studies around the world show that election fraud in almost universally done by government officials and politicians. A system which depends on the election officials to ensure that the software on the machines they use is correct, and operating according to the source code examined by certification labs without them having the ability to verify that the code on their machines is the same as the certified code is absurd.
The exact same tests that everyone is relying on to determine what software is running on the election systems will instantly identify any changes made by anyone to the election systems. Anyone who says that they can not depend on those tests, if they aren't lying, just invalidated the entire certification process.
If the county, working with Dominion, can't ensure that the voting machines are in the exact same configuration that they were before the audit regardless of what anyone did to them at the audit, then they have never had the ability to ensure that they knew what code was actually running on the machines. But they already signed documents stating the opposite and filed them with the federal government.
So either the Arizona Secretary of State is lying now, or Dominion was lying to the federal government.