23 NYCRR Part 500 (Amendment 2) readiness for fintech & embedded finance. Realistic timelines, costs, and the controls that fail audits in this vertical.