Threat Modeling for Managed Attribution: Part 1