Select an RFC to inspect.
28 RFCs across normal / standard / emergency. Per RFC: risk class, blast radius, rollback plan, customer notification, sign-off chain. The artifact every SOC2 audit pulls under CC8.1 — and the gap most teams don't notice until the auditor asks for it.