Threat model
Trust boundaries, the attacker model, the fail-closed guarantees, and what is not defended
Known limitations
What this release does not defend, and the behaviours it accepts
Security
What Libra defends, against whom, and what it does not.