Auditors concluded that regulators have failed to meet even basic promises. It found, for instance, that just 3 percent of recreational marijuana retailers had been inspected and only about a third of growers. It said the state’s medical marijuana program, long a source of black market diversion both in the state and nationally, has “structural weaknesses” that “greatly increase the risk of diversion.”