diff --git a/docs/changelog.d/+review-single-user-cluster.doc.md b/docs/changelog.d/+review-single-user-cluster.doc.md
new file mode 100644
index 0000000..eddd1d4
--- /dev/null
+++ b/docs/changelog.d/+review-single-user-cluster.doc.md
@@ -0,0 +1 @@
+First compensating control review: verified `single-user-cluster` still in effect. Added aspirational how-to card for PCI DSS evidence collection.