Threat model
=======================

*TODO*