I think anyone is allowed to contribute information. When stuff like this is so hush hush, allowing anonymity of collection is important.
I think that some verification needs to happen; I'm not sure there is a one-size-fits-all for this, but we need to have metrics in place for verifying that this is true, or at least sharing the level of certainty (verified/unverified or a less binary "rating" system)
Overview
Outline the strategy for collecting, reviewing, and validating data. Some questions to spark discussions: