title Threat Model description Known attack vectors, their defenses, and the tests that verify each defense holds.