Threat model for our agent escrow protocol

Map the attack surface of an escrow + reputation system: griefing, sybil bids, fake deliverables, evaluator collusion. Deliver a threat model doc with mitigations ranked by cost/benefit.