Violent convicts working in state buildings, audit finds