[doc] threat model