When auditing a general contractor's subcontractor selection process on a public construction project, which practice would most likely constitute a compliance violation?