Drafted section on threat vectors

[bwbush]

See docs/technical-report-1.md#threat-model for the discussion of the threat model.

Questions for reviewers:

• Should this be a narrative or a table?
• Do we need more details for the threats?
• Is it worth including already fully or partially mitigated threats, just for completeness and because we'll need to discuss them in the CIP?
• What's missing?

[will-break-it]

Great overview. I haven't found anything that's missing.
Perhaps, it does make sense to split the threats that haven't been addresses and require further research from the ones already considered/ potentially solved.

Another improvement could be splitting threats into multiple tables by category, like the ones you've already mentioned:
by delay, invalid creation, equivocation, grinding...

[bwbush]

Great overview. I haven't found anything that's missing. Perhaps, it does make sense to split the threats that haven't been addresses and require further research from the ones already considered/ potentially solved.

Another improvement could be splitting threats into multiple tables by category, like the ones you've already mentioned: by delay, invalid creation, equivocation, grinding...

I split the tables by subject and then later summarized what was outstanding. This seemed to flow better. Fixed in 93233d9.