This is human trust, trust with the user story “As a human on Earth, can I ever trust CVE again?”. I’m going to start the story about trusting CVE with NVD and why we also can’t trust them. I’ve done a bit more digging into the CVE Foundation, and it’s starting to feel like it’s a rogue group of people from the CVE board that has no affiliation or approval from CVE, MITRE, CISA, or anyone really.