The rules haven't changed. The obligation to capture, retain, and supervise communications is exactly what it was in 2021. What changed was the enforcement spotlight — and firms that have mistaken a quieter SEC for a changed regulatory landscape are building exposure that will surface eventually.