The AICPA has proposed a new, leaner SOC 2 framework that accounts for changing technology, especially AI, with an eye toward shorter, more useful reports people actually read versus skim for exceptions.