Mixminion threat model

All three:

Global passive adversary -- can observe everything
Owns some of the nodes
Can inject, modify, delete some traffic

We are not real-time, packet-based, or steganographic

(We won't actually succeed against this adversary. It's a tough adversary.)