up

src/Policy/StellaOps.Policy.Scoring/CvssMetrics.cs

@@ -61,6 +61,18 @@ public sealed record CvssThreatMetrics
     /// <summary>Exploit Maturity (E) - Optional, defaults to Not Defined.</summary>
     [JsonPropertyName("e")]
     public ExploitMaturity ExploitMaturity { get; init; } = ExploitMaturity.NotDefined;
+
+    /// <summary>When the threat signal was last observed (UTC).</summary>
+    [JsonPropertyName("observedAt")]
+    public DateTimeOffset? ObservedAt { get; init; }
+
+    /// <summary>When this threat signal should expire.</summary>
+    [JsonPropertyName("expiresAt")]
+    public DateTimeOffset? ExpiresAt { get; init; }
+
+    /// <summary>Source of threat intelligence (kev, epss, internal).</summary>
+    [JsonPropertyName("source")]
+    public string? Source { get; init; }
 }
 
 /// <summary>