Build a list from GSC, sitemap, and logs
Three inventories, one deduplicated set. The gaps between them are the audit.
Three sources, three truths
A sitemap is what you offered for indexing. Search Console is what Google reports as indexed. Server logs are what actually got requested.
Read the gaps
Indexed but not in the sitemap: Google found a path you did not intend to promote. In the sitemap but not indexed: coverage or quality — still crawl the set to confirm 200s before a recrawl request.