* changes: docs(threat-model): classify threats by mitigating entity docs(threat-model): club RME note with other assumptions