Threat model

Also written: threat modeling

A written answer to four questions: what are we building, what can go wrong, what will we do about it, and did it work. A table in your repository, such as `THREATS.md`, is enough.