Quick question before we dig in - when you compare your CSV to the PPE policy, are you checking that PEN’s expiration date is right for PPE-managed accounts, or trying to catch accounts PPE policy isn’t reaching at all?
Also, have you tried PPE’s built-in email reminders (Policy > Max Age rule > “Send email notifications”)? That might already do what you need without touching Auditor.