External adversary

External attacks are considered limited to those that can maybe get full access to a CI environment, but not the underlying source code.