What is the threat model?

[apopiak]

Which kinds of threats should the chain be secure against?

Which context will the chain be run in? Public, private or permissioned? (How much of a problem is DoS?)
How much trust is there for the actors? (Creator of escrows/jobs, oracles)