A CVE triage pipeline that keeps asking, because day one tells you nothing | Hacker News Reader