Skip to content

docs: add comprehensive threat model specification (closes #7) - #11

Open
rupesh-kumar-sah wants to merge 1 commit into
Sconce-Labs:mainfrom
rupesh-kumar-sah:docs/threat-model-issue-7
Open

rupesh-kumar-sah wants to merge 1 commit into
Sconce-Labs:mainfrom
rupesh-kumar-sah:docs/threat-model-issue-7

Conversation

@rupesh-kumar-sah

Copy link
Copy Markdown

Summary

This PR resolves issue #7 by adding to formally document the security threat model for the Corridor protocol.

Coverage

  • Assets: User KYC privacy, credential integrity, double-spend resistance via single-use nullifiers, policy enforcement soundness, and storage TTL rent continuity.
  • Adversary Models:
    • Dishonest relayer ()
    • Malicious holder ()
    • Compromised issuer key ()
    • Compromised auditor key ()
    • Verifier soundness bug ()
  • Per-Layer Attacks & Mitigations: Protocol/Circuit layer (Noir/UltraHonk), Soroban contract layer, and network/relayer layer.
  • Out of Scope: Explicit pre-mainnet assumptions and out-of-scope boundaries.

Closes #7

@vercel

vercel Bot commented Sep 17, 2026

Copy link
Copy Markdown

@rupesh-kumar-sah is attempting to deploy a commit to the Samuel Ojetunde 's projects Team on Vercel.

A member of the Team first needs to authorize it.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Threat model doc

1 participant