threat model - nobuoka-pub