20. Threat Model

Status: this section points to docs/THREAT-MODEL.md, which holds the analysis. It covers 21 threats, each with a scenario, preconditions, impact, mitigation, residual risk and test reference.

Conformance with this specification means that the mitigations in that document are implemented as described, and that the tests it cites pass.