# Assemble SOC 2 Change Evidence

Auditors do not want vibes — they want ticket, approval, diff, and verify for each production change.

## Why it matters

FinTech releases without evidence packs fail SOC 2 sampling. An indexable pack makes audits boring (the goal).

## Ticket focus

1. Four artifacts: ticket, approval, diff, verify
2. EVIDENCE.md index

## Tip codes

- `EVIDENCE_FOUR` — ticket, approval, diff, verify
- `EVIDENCE_INDEX` — one file that points at each artifact