Skip to content

Threat models

Specify what you protect, from whom, and under which constraints.

  1. TM1 — Curious provider
  2. TM2 — Compromised infrastructure
  3. TM3 — Malicious operator
  4. TM4 — ISP / Wi-Fi / LAN
  5. TM5 — Multipoint passive observer
  6. TM6 — Global passive adversary
  7. TM7 — Malicious contact
  8. TM8 — Harassment / OSINT doxxing
  9. TM9 — Ordinary legal request
  10. TM10 — Sophisticated multisource investigation
  11. TM11 — Locked device
  12. TM12 — Unlocked device
  13. TM13 — Spyware / controlled endpoint
  14. TM14 — Supply-chain compromise
  15. TM15 — State censorship

The matrix is qualitative and configuration-dependent. Strong, partial, exposed, weak and unknown are relative assessments, not absolute grades. Unknown is not a negative score. No general global-passive resistance is established; an unlocked or controlled endpoint is a different threat from a provider request.

The detailed evidence is maintained in the French Phase 2 register. The translation is a restatement, not new evidence.

[1]