More practical security for Qubes (and more realistic threat model)

Which detection capabilities? According to the Joanna’s quote above, it’s impossible to reliably detect a compromise in your system.

But see also: Intrustion Detectors in dom0: bad idea?