Fixing vulnerability data quality requires fixing the architecture first

This interview with Art Manion examines why vulnerability records across repositories are inconsistent and hard to trust, introduces the idea of Minimum Viable Vulnerability Enumeration (MVVE) as a way to think about assertions needed to identify the same vulnerability across systems, and argues for shared terms, provenance, and architecture-focused repository design rather than new specs or metrics-driven shortcuts such as overreliance on CVSS.