Content withheld until the research can stand on its own.
Re-reading the Rainbow Series for a world with agents inside.
In the 1980s, a set of US computer-security guidelines came to be known by the colours of their covers: the Rainbow Series. The Pastel Series is our research revisiting those criteria for a world where the actor may be a person or an AI agent that is already inside. It is unpublished and in progress.
Not affiliated with or endorsed by the National Security Agency or any government body.
The colour shift
The old criteria were written for machines and the people cleared to use them.
FR-2Assume something is already inside.
The actor changed. The questions didn’t.
For most of computing’s history, the actor a security model worried about was a person: an outsider trying to get in, or an insider cleared to be there. Today the actor that matters most may be an AI agent acting with legitimate credentials, already inside, doing exactly what its permissions allow.
The questions the old criteria asked are still the right ones: who may act, on what, and how anyone can tell afterwards. The setting around them has changed. Criteria written for a different era deserve a careful re-reading, not a rewrite from memory. That is the work. It starts from our second flight rule, assume something is already inside, and how we hold ourselves to it is on the Security page.
What we can say. What we can’t yet.
What we can say
- It is research in progress.
- It revisits the Rainbow Series criteria.
- It assumes the actor may be a person or an AI agent already inside.
What we can’t say yet
- Methods
- WITHHELD
- Scope
- WITHHELD
- Release date
- WITHHELD
What it never claims
- It is not affiliated with or endorsed by the National Security Agency or any government body.
- It is not published, and it is not for citation.
- It does not certify, rate or approve any system.
- It gives no count of volumes or criteria.
Briefing: common questions
What is the Pastel Series?
Our research revisiting the Rainbow Series security criteria for a world where the actor may be a person or an AI agent that is already inside. It is unpublished and in progress.
What was the Rainbow Series?
In the 1980s, a set of US computer-security guidelines came to be known by the colours of their covers: the Rainbow Series. The old criteria were written for machines and the people cleared to use them.
Why revisit the Rainbow Series now?
Because the actor who matters most may now be an AI agent acting with legitimate credentials, already inside. Criteria written for a different era deserve a careful re-reading. It starts from our second flight rule: assume something is already inside.
Is the Pastel Series affiliated with the NSA?
No. The Pastel Series is not affiliated with or endorsed by the National Security Agency or any government body.
When will the Pastel Series be published?
It has no release date. Its methods and scope are withheld until the research is ready. Follow Deimos AI on LinkedIn for news.
Follow the research.
The Pastel Series is unpublished. Nothing is released before it can stand on its own.