Our Legal Reality: Monitoring Specifications to Manage Risk