j---
j---
Thanks. Is there an issue or project I should watch to follow that progress? I'm not sure that transparency by itself will fix this design question, but it will help...
This makes sense to want to provide guidance for how projects can improve. I having some trouble with likelihood as an actual probability here. How would the output of this...
We definitely arranged the equivalency sets in a decision tree. However, the process for community voting on assigning relative ranking (and therefore the labels 0.1 to 10.0) is probably more...
How should we handle information that naturally should be in two places? For example, the relationship between technical impact and CVSSv3 or CVSSv4 probably belongs both in a data mapping...
> I'd say we put it in the proposed CVSS/SSVC page and then link to it from the Technical Impact reference page. Thanks! This makes sense to me as the...
I'd like to submit that data mapping may be a separate step that after gathering information about a topic. Though knowing what data you could map to a decision certainly...
This also extends the discussion in https://github.com/CERTCC/SSVC/blob/main/docs/topics/related_systems.md
Perhaps the answer is a brief summary and reference within SSVC to the Vultron work then?
This seems like a good idea. Capturing some notes for future us, before I forget: Some decision points will be on the order of 1-2 years, for example *Mission Impact*...
What would it look like for the code to issue a warning if a decision tree is using a deprecated or superseded version? I'm thinking that deprecation warnings are fairly...