Panelists at the National Association of Regulated Utility Commissioners' annual meeting said requiring documentation of software's origins may be tricky.