Substrate Threat Model

[Michael Taufen]

Hi everyone,

We've been working on a basic, high level threat model for Substrate. We're sharing our first iteration today for feedback from the community. The intent is to develop a shared understanding of security expectations for Substrate, merge that into the upstream repo, and use it to guide design, review, and testing from here on out. Since Substrate is changing very quickly, we are trying to keep the threat model relatively high level. We should expect to evolve it over time as upstream changes.

PTAL: https://docs.google.com/document/d/1UAuJzfgkXe6Qa9TTp4wwG0zuHFIGIxEXqafveGq8f9s/edit?resourcekey=0-J-c0L_AJFNjXBX_8TjMbMA&tab=t.0

Note: It's currently a Google doc because it's much easier to make suggestions and follow the  various comment threads in that format. Once we have decent alignment, we'll copy it to markdown and send a PR. 

Thank you,

Mike, Vikas, and Oleg

[Michael Taufen]

I'll also note, this is a first pass. We probably missed some important things. Maybe even really big things! So please comment if you think we missed something :)

[Michael Taufen]

Bumping this - thanks folks who have provided feedback so far. I'm planning to address existing comments and then send a PR.

[Michael Taufen]

Note: if you are having trouble accessing the doc, you need to join this mailing list for access. Thank you.

[Michael Taufen]

PR: https://github.com/agent-substrate/substrate/pull/303