Eight named risks. Each with severity, likelihood, mitigation, and (where relevant) the named partner the mitigation depends on. Publishing the threat model first is itself a legitimacy move.
UK legal exposure if any forensic activity is interpreted as practising regulated work without authorisation.
MitigationReferral-only doctrine. No sample, scene, or remain ever touched under TLTE auspices. Documented in Doctrine rule 1.
Sri Lankan state characterisation of the Hub as separatist infrastructure.
MitigationStandards-only public posture. No homeland operations during Aarambam. UK jurisdiction, civilian framing, OHCHR-aligned. Multi-community partner-list visible on every page.
UK Terrorism Act 2000 §12/13 — encouragement / glorification proximity if framing drifts.
MitigationCivic Protection Doctrine guardrails apply. Final-Days Dossier framing reused. Velicham refuses glorification framing.
Any DNA work conducted outside ISO/IEC 17025 accreditation would be inadmissible and undermine future accountability.
MitigationHub never runs a lab. Doctrine rule 1 is non-removable. Partner accreditation status verified before referral.
Inadvertent re-traumatisation if survivor stories surface on Hub pages.
MitigationNo survivor intake on any Hub surface. Murad Code applied. Routing to PEARL / ITJP / OHCHR. Velicham refuses casework intake.
Donor concentration that could compromise the Hub's independence.
MitigationMulti-jurisdiction trustees with Shamir 3-of-5. Donor list above £5,000 publishable annually per CIC and CIO reporting.
Tampering with citations registry or doctrine changelog.
MitigationAppend-only changelog. SHA-256 stamped dossiers. Two-Archon sign-off. Mirror published to Reading Room and Vault RB-12 manifest.
Pressure to expand into operational service delivery before Graduation Gates close.
MitigationSequencing Doctrine Gate 4 binds operational expansion. Hard rule in doctrine. Public refusal of any premature deployment ask.