This chapter now lives inside the deep document:
The threat model: attacking our own instrument