Skip to content

Threat Model

[!IMPORTANT] Legal banner - Fairwave defaults to lab/no-RF mode. Transmitting on cellular bands without proper authorization is illegal in most jurisdictions. This threat model covers lawful private LTE deployments only.

The authoritative threat model lives in the repository root: design/threat-model.md.

It covers:

  • STRIDE analysis of the control plane, agent, SIM vault, peering fabric, operator portal, RF path (lab), and metadata logs
  • Asset inventory (Ki/OPc, operator credentials, mTLS CA, WireGuard keys, UE metadata, spectrum-attestation tokens)
  • Trust boundaries and actors
  • Explicit out-of-scope items (IMSI catchers, jamming, LI bypass)
  • Privacy commitments (no IMSI in logs, hash-at-rest, consent-to-onboard)
  • Reporting channel: security@hyperonx.io

Read the full document before contributing security-sensitive code.