[DISCUSS] Draft threat model for Pekko and request for community review

[Samuele Resca <sa...@gmail.com>]

Hey folks,

I'd like to draw the list's attention to PR #3478 [1], which adds a draft
threat model for Pekko.

The Pekko PMC asked the ASF Security team for a draft threat model to
refine, in preparation for security scans. The PR contains a first draft of
the threat model based on the information already documented in the Pekko
docs.

I wanted to flag it here explicitly as a broad review seems worthwhile. If
you have views on the document's scope, the trust-boundary calls, or the
remaining open items, please comment on the PR.

Thanks in advance.
Samuele

[1]https://github.com/apache/pekko/pull/3478