both
@protocolguild and
@l2beat are civic standards bodies which start with a question:
PG: what is the L1 core protocol?
L2B: what makes L2s secure?
they use the resulting framework to produce lists
PG: who is working on the L1?
L2B: what are the most secure L2s?