DARPA-PS-26-127_Perrseus_Attachment_L_Perrseus_CUI_Guide.pdf

Distribution Statement A: Approved For Public Release

Controlled Unclassified Information Guide

Program: PERRSEUS Program Manager: Travis Autry

Program Security Officer: James Persons

Date: June 27, 2026 Version: 1

Travis Autry James Persons

MXO Program Manager MXO Program Security Officer ii

FOREWORD

1. DESCRIPTION

2. AUTHORITY

3. DISTRIBUTION

GENERAL

1. PURPOSE

2. APPLICABILITY AND SCOPE

3. OFFICE OF PRIMARY RESPONSIBILITY

4. CONTROLLED UNCLASSIFIED INFORMATION (CUI) CHALLENGES

5. CUI CATEGORIES

6. EXPORT CONTROL RESTRICTED INFORMATION

7. DISCLOSURE OF CUI

8. CUI PROTECTION REQUIREMENTS

9. NOTIFICATION OF UNAUTHORIZED DISCLOSURE

10. INFORMATION PROTECTION GUIDANCE CHARTS

iii

FOREWORD

1. DESCRIPTION

The Perrseus program will develop architectures and processes for microscale-Ultra-High Vacuum (μUHV) packages for next-generation photonic circuits, Micro-Electro-Mechanical Systems (MEMS) devices and quantum sensors on future dual-use applications. The deliverables of the program will be a demonstration of an ultra-high vacuum system maintaining a microscale size of 1E-10 mbar, vacuum level of 5mL and maintaining a 3 year lifetime while using cold atoms.

2. AUTHORITY

CUI elements referenced in this guide are under the authority of Executive Order 13556, Controlled Unclassified Information, November 4, 2010 (as amended) and in accordance with DoDI 5200.48, “Controlled Unclassified Information,” March 6, 2020.

3. Distribution:

Distribution Statement A: Approved For Public Release.

1. PURPOSE

a. The purpose of this CUI guide is to ensure the protection of Perrseus information IAW DoDI 5200.48. Perrseus information must be controlled and stored consistent with DFARS 252.204-7012 requirements as detailed in National Institute for Standards and Technology

(NIST) 800-171.

b. This guide is not for classified national security information as defined in

Executive Order 13526, but identifies specific elements of sensitive information that are unclassified but require additional protections.

2. APPLICABILITY AND SCOPE: This guide applies information, material and processes generated by Perrseus. This guide is the basis for identifying, protecting and marking of information and material designated as a type of controlled unclassified information (CUI) associated with Perrseus. This guide is used in conjunction with related guidance (security classification guides, DoD Policy, etc) associated with the overall effort of Perrseus. The scope of this guide is based on Perrseus as planned at the date of this guide and may change over the course of Perrseus.

3. OFFICE OF PRIMARY RESPONSIBILITY (OPR): The Office of Primary Responsibility is MXOsecurity@darpa.mil.

4. CONTROLLED UNCLASSIFIED INFORMATION (CUI) CHALLENGES: CUI Challenges are directed to the OPR. Information is protected in accordance with this guide until the challenge is resolved.

5. CUI Categories. The following CUI Categories are used to protect Perrseus:

a. Export Control: Export Controlled: Unclassified information concerning certain items, commodities, technology, software, or other information whose export could reasonably be expected to adversely affect the United States national security and nonproliferation objectives. To include dual use items; items identified in export administration regulations, international traffic in arms regulations (ITAR) and the munitions list; license applications; and sensitive nuclear technology information.

b. Proprietary Business Information: Material and information relating to, or associated with, a company's products, business, or activities, including but not limited to financial information; data or statements; trade secrets; product research and development;

existing and future product designs and performance specifications.

mailto:MXOsecurity@darpa.mil

c. Defense: Controlled Technical Information (CTI). Means technical information with military or space application that is subject to controls on the access, use, reproduction, modification, performance, display, release, disclosure, or dissemination. Controlled technical information is to be marked with one of the distribution statements B through F, in accordance with Department of Defense Instruction 5230.24, "Distribution Statements of Technical Documents." The term does not include information that is lawfully publicly available without restrictions. "Technical Information" means technical data or computer software, as those terms are defined in Defense Federal Acquisition Regulation Supplement clause 252.227-7013, "Rights in Technical Data - Noncommercial Items" (48 CFR 252.227-7013). Examples of technical information include research and engineering data, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, technical orders, catalog-item identifications, data sets, studies and analyses and related information, and computer software executable code and source code.

6. EXPORT CONTROL RESTRICTED INFORMATION: Each performer is responsible for assessing their technology and ensuring compliance with all export control laws and regulations.

This CUI guide does not relieve any program participant from export control requirements.

7. DISCLOSURE of CUI.

a. Public Disclosure. Public Disclosure of any Perrseus information must follow the DISTAR process. Please contact the Perrseus OPR and Public_Release_Center@darpa.mil for additional guidance.

b. Freedom of Information Act (FOIA) Requests. All FOIA request are directed to the DARPA FOIA Office.

c. Foreign Disclosure. CUI controlled by DARPA may be shared with foreign nationals if access to such information would accomplish a lawful government purpose and would not be detrimental to national security.

8. CUI PROTECTION REQUIREMENTS: Perrseus CUI must be stored in accordance with DODI 5200.48. Processing of CUI is only authorized on systems compliant with DFARS 252.204-7012 as detailed in NIST 800-171.

9. UNAUTHORIZED DISCLOSURE

a. Personnel must immediately report all unauthorized disclosures or suspected and known security incidents, and suspicious activities involving CUI to the Perrseus PSO and PSR at MXOsecurity@darpa.mil.

mailto:Public_Release_Center@darpa.mil mailto:MXOsecurity@darpa.mil

b. Data breaches of Defense Industrial Base (DIB) networks and systems involving Perrseus CUI material must be reported IAW DFARS 252.204-7012 requirements. In addition, all breaches must be reported to the DARPA Project contracting officer and program security officer (PSO) upon discovery.

10. INFORMATION PROTECTION GUIDANCE CHARTS

These charts are provided to assist in identifying what types of information associated with the Perrseus effort may be sensitive, provide guidance on the relevant markings for this information to control dissemination, and provide guidance on when these dissemination controls no longer apply. Each performer is responsible for assessing their technology and ensuring compliance with all export control laws and regulations. This CUI Guide does not relieve any program participants from export control requirements. If at any time there are questions regarding which category of information something falls under, or what dissemination controls apply, individuals should request guidance from MXOsecurity@darpa.mil.

Element of Information Index Category Reason LDC or Distribution Statement

Remarks

Integrated manufacturing capabilities revealing Perrseus µUHV

• Processing and integration recipes

• Novel fabrication techniques

• Integration tolerances

• Development steps or tooling

• Architectural design of the final processing guidance/blueprints (The process traveler)

Defense Controlled Technical Information

(CTI)

10 U.S.C. 130, 15

CFR 772.1, 15 CFR

774 Supplement 1, 15 CFR 774 Supplement

2, 22 CFR 120

22 CFR 121, 48 CFR

252.204-7012

Distribution Statements B through F

FOIA

Exemptions 3 & 4 may be applicable

Information or data defined within the Commerce Control List (CCL), United States Munitions List (USML), or applied license applications to control export.

Export Control

Export Controlled

10 USC 130(a), 13 USC 301(g), 42 USC 2077(a), 42 USC

2156, 42 USC

2168(a), 50 USC 4614(c), 50 USC 4605(l)(5), 15 CFR

Distribution statement C.

Distribution authorized to U.S. Government agencies and their contractors. Other

FOIA

Exemptions 3 & 4 may be applicable

718.3, 15 CFR 736

Supplement 2, 15 CFR 748.1(c), 15 CFR 760.5(c)

15 CFR 772.1, 15

CFR 774 Supplement

1, 15 CFR 774

Supplement 2, 22 CFR Part 120, 22 CFR 124.9(a)(5), 22 CFR 126.10(b), 32 CFR 250.4(a), 32

CFR 250.9

requests for this document must be referred to DARPA MXO Office.

Material not covered under general Export Control Classification Number (ECCN) and determined by performer to be EAR99

Export Control

Export Controlled

10 USC 130(a), 13 USC 301(g), 42 USC 2077(a), 42 USC

2156, 42 USC

2168(a), 50 USC 4614(c), 50 USC 4605(l)(5), 15 CFR

718.3, 15 CFR 736

Supplement 2, 15 CFR 748.1(c), 15 CFR 760.5(c)

15 CFR 772.1, 15

CFR 774 Supplement

1, 15 CFR 774

Supplement 2, 22 CFR Part 120, 22 CFR 124.9(a)(5), 22 CFR 126.10(b), 32 CFR 250.4(a), 32

CFR 250.9

See Remarks EAR99 items typically do not require a license (NLR). However, part 746, of the Export Administration Regulations (EAR), overrides the NLR rule for Embargoes and Other Special Controls.

Any deviations from this should be reviewed by both performer’s export compliance official and

DARPA MXO

PM.

Data contractually identified as controlled by the company as proprietary

Proprietary Business Information

General Proprietary Business Information

(PROPIN)

18 U.S. Code 1905

18 U.S. Code 664

Federal Employees and Contractors Only

(FEDCON)

FOIA Exemption 3 may be applicable.

Non-integrated/standard components of Perrseus µUHV that do not reveal the “how to” of the capability

• Bonding processes

• Interconnects

• Pumps

N/A N/A DoDI 3210.1

(USD(AT&L))

Memorandum, "Fundamental Research," May 24, 2010.

UNCLASSIFIED Development of non-integrated components and flow-down requirements are approved for sharing within performer teams, provided they do not disclose the full integrated design

Topics related to this section should be reviewed by both

DARPA MXO

PM and/or comply with Section 7 of this CUI Guide, including the DISTAR process.

Methods of measurement and data of vacuum parameters of Perrseus µUHV

N/A N/A DoDI 3210.1

(USD(AT&L))

Memorandum, "Fundamental Research," May 24, 2010.

UNCLASSIFIED Topics related to this section should be reviewed by both

DARPA MXO

PM and/or comply with Section 7 of this CUI Guide, including the DISTAR process.