threat modelling

[gsvarovsky]

Existence of the project and its goals will be publicised. Feedback may influence the domains to be
analysed or the approaches taken.

Threat modelling will be done in at least two application domains with different information authority
needs. Ideally each of the two application domains analysed will have an external representative to
minimise bias.

• published article of intent (this repository's README), linked from social media
• project backlog
• 2 x threat model documents (with annotated diagrams). See the threat modelling README.

[gsvarovsky]

Threat models:

• threats/e-invoicing.md
• threats/legal-docs.md