optional: Should the requirement titles be more active? E.g. "Level 1: Produce an inventory of all build dependencies", "Level 2: Triage all known vulnerabilities". _Originally posted by @TomHennen in https://github.com/slsa-framework/slsa/pull/1432#discussion_r2169380919_