For each decision point, explain a bit better how information to reach a value for that decision point can / should be gathered.
If people follow this guidance, what confidence can be shared when sharing SSVC information?
sub-part of #24