Tell about the vulnerability status timeline
on the vulnerability page, and say it's possible
to comment on a status change.