Most clients don't care if you fixed the NAT statement by turning off bidirectional. They care that you found the issue in the firewall, fixed it, and have implemented processes so it doesn't happen again.
Something I respect a lot about our CISO is they always demand clarity and don’t care about technical bullshit - even if it’s exculpatory -, even though they are a skilled person.
They do the “external read” and have the power and invoke it. Maybe that’s why they’re CISO.