DARPA-PA-27-02_Protein_Palace_Attachment_J_CUI_Guild.pdf

DISTRIBUTION STATEMENT A

Approved for Public Release: Distribution Unlimited

Controlled Unclassified Information Guide

Program: (U) Protein Palace Program Manager: Huanan Zhang

Program Security Officer: James Persons

Date: November 9, 2026 Version: 1.0

Huanan Zhang James Persons MXO Program Manager MXO Program Security Officer

ZHANG.HU

ANAN.1640

228845

Digitally signed by

ZHANG.HUANAN.16

40228845 Date: 2026.11.10 14:42:05 -05'00'

PERSONS.JA

MES.KENNET

H.1214880993

Digitally signed by

PERSONS.JAMES.K

ENNETH.1214880993

Date: 2026.11.10 13:56:10 -05'00' ii

Approved for Public Release: Distribution Unlimited

FOREWORD

1. DESCRIPTION

2. AUTHORITY

3. DISTRIBUTION

GENERAL

1. PURPOSE

2. APPLICABILITY AND SCOPE

3. OFFICE OF PRIMARY RESPONSIBILITY

4. CONTROLLED UNCLASSIFIED INFORMATION (CUI) CHALLENGES

5. CUI CATEGORIES

6. EXPORT CONTROL RESTRICTED INFORMATION

7. DISCLOSURE OF CUI

8. CUI PROTECTION REQUIREMENTS

9. NOTIFICATION OF UNAUTHORIZED DISCLOSURE

10. INFORMATION PROTECTION GUIDANCE CHARTS

iii

FOREWORD

1. DESCRIPTION

The Protein Palace program will develop new methods to purify virtually any protein, enabling separation of large complex molecules from biomanufacturing feedstocks with high specificity, purity, and yield. Protein Palace technologies will inform development of a single unit and reconfigurable platform.

(U) Performer deliverables for the Protein Palace program in Phase 1 include a demonstration of separation of multiple proteins with less emphasis on the purity or yield.

In Phase 2, the performers will demonstrate a more precise separation of the proteins, specifically showing a higher percentage of purity and yield within defined constraints for time and volume. Both phases will include the performers designing and developing hardware at the Unclassified and TRL 4 level, “Applied Research – Components Validated in Laboratory Environment”.

2. AUTHORITY

CUI elements referenced in this guide are under the authority of Executive Order 13556, Controlled Unclassified Information, November 4, 2010 (as amended) and in accordance with DoDI 5200.48, “Controlled Unclassified Information,” March 6, 2020.

3. DISTRIBUTION

Distribution is authorized for public release.

Approved for Public Release: Distribution Unlimited

1. PURPOSE

a. The purpose of this CUI guide is to ensure the protection of MXO information IAW DoDI 5200.48. MXO information must be controlled and stored consistently with DFARS 252.204-7012 requirements as detailed in National Institute for Standards and Technology (NIST) 800-171.

b. This guide is not for classified national security information as defined in Executive Order 13526 but identifies specific elements of sensitive information that are unclassified but require additional protection.

2. APPLICABILITY AND SCOPE: This guide applies information, material and processes generated by the MXO program. This guide is the basis for identifying, protecting and marking of information and material designated as a type of controlled unclassified information CUI associated with MXO. This guide is used in conjunction with related guidance security classification guides, DoD Policy, etc associated with the overall effort of MXO solicitation or request. The scope of this guide is based on MXO solicitations or requests as planned at the date of this guide and may change over the course of the solicitation or request.

3. OFFICE OF PRIMARY RESPONSIBILITY (OPR): The Office of Primary Responsibility is DARPA | MXO at MXOSecurity@darpa.mil.

4. CONTROLLED UNCLASSIFIED INFORMATION CUI CHALLENGES: CUI Challenges are directed to the OPR. Information is protected in accordance with this guide until the challenge is resolved.

5. CUI Categories. The following CUI Categories are used to protect MXO solicitation or request.

a. Defense: Controlled Technical Information (CTI). Controlled Technical Information means technical information with military or space application that is subject to controls on the access, use, reproduction, modification, performance, display, release, disclosure, or dissemination. Controlled technical information is to be marked with one of the distribution statements B through F, in accordance with Department of Defense Instruction 5230.24, "Distribution Statements of Technical Documents." The term does not include information that is lawfully publicly available without restrictions. "Technical Information" means technical data or computer software, as those terms are defined in Defense Federal Acquisition Regulation supplement clause 252.227-7013, "Rights in Technical Data - Noncommercial Items" (48 CFR 252.227- 7013). Examples of technical information include research and engineering data, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, technical orders, catalog-item identifications, data sets, studies and analyses and related information, and computer software executable code and source code.

b. Operations Security (OPSEC). Critical information determined to give evidence of the planning and execution of sensitive (frequently classified) government activities after going through a formal systematic vetting process in accordance with National Security Presidential Memorandum Number 28. This process identifies unclassified information that must be protected. It almost always results from an agency’s official OPSEC program or is otherwise commonly approved for use by the CUI Senior Agency Official.

c. Export Controlled. Unclassified information concerning certain items, commodities, technology, software, or other information whose export could reasonably be expected to adversely affect the United States national security and nonproliferation objectives. Includes dual use items; items identified in export administration regulations, international traffic in arms regulations and the munitions list; license applications; and sensitive nuclear technology information. Each performer is responsible for assessing their technology and ensuring compliance with all export control laws and regulations. This CUI guide does not relieve any program participant from export control requirements.

d. Proprietary Business Information: General Proprietary Business Information

(PROPIN). Material and information relating to, or associated with, a company's products, business, or activities, including but not limited to financial information;

data or statements; trade secrets; product research and development; existing and future product designs and performance specifications.

6. EXPORT CONTROL RESTRICTED INFORMATION: Each performer is responsible for assessing their technology and ensuring compliance with all export control laws and regulations.

This CUI guide does not relieve any program participant from export control requirements.

7. DISCLOSURE of CUI.

a. Disclosure authorized by U.S Government agencies and their contractors (CTI). Other request for this document must be referred to DARPA MXO security.

b. Freedom of Information Act (FOIA) Requests. All FOIA requests are directed to the DARPA FOIA Office.

c. Foreign Disclosure. CUI controlled by DARPA may be shared with foreign nationals if access to such information would accomplish a lawful government purpose and would not be detrimental to national security.

8. CUI PROTECTION REQUIREMENTS: MXO solicitation or request CUI must be stored in accordance with DODI 5200.48. Processing of CUI is only authorized on systems compliant with DFARS 252.204-7012 as detailed in NIST 800-171.

Approved for Public Release: Distribution Unlimited

9. UNAUTHORIZED DISCLOSURE

a. Personnel must immediately report all unauthorized disclosures or suspected and known security incidents, and suspicious activities involving CUI to the (Protein Palace) solicitation or request PSO and PSR at MXOSecurity@darpa.mil.

b. Data breaches of Defense Industrial Base (DIB) networks and systems involving MXO solicitation or request CUI material must be reported IAW DFARS 252.204-7012 requirements. In addition, all breaches must be reported to the DARPA Project contracting officer and program security officer (PSO) upon discovery.

D

IS

TR

IB

U

TI

O

N S

TA

TE

M

EN

T A pp ro ve d fo r P ub lic

R el ea se

: D is tri bu tio n

U nl im ite d

. I

N

FO

R M

A

TI

O N

P R

O

TE

C

TI

O N

G U

ID

A

N C

E C

H A

R

TS

Th es e ch ar ts a re p ro vi de d to a ss is t i n id en tif yi ng w ha t t yp es o f i nf or m at io n as so ci at ed w ith th e

M X

O so lic ita tio n or re qu es t e ffo rt m ay be se ns iti ve , p ro vi de g ui da nc e on th e re le va nt m ar ki ng s f or th is in fo rm at io n to c on tro l d is se m in at io n, a nd p ro vi de g ui da nc e on w he n th es e di ss em in at io n co nt ro ls n o lo ng er a pp ly

. I f a t a ny ti m e th er e ar e qu es tio ns re ga rd in g w hi ch c at eg or y of in fo rm at io n so m et hi ng fa lls u nd er , o r w ha t d is se m in at io n co nt ro ls a pp ly , i nd iv id ua ls sh ou ld re qu es t g ui da nc e fr om

D A

R

PA

a t M

X O

Se cu rit y@ da rp a.

il.

El em en t o f In fo rm at io n

In de x C at eg or y

R ea so n

LD

C o r

D ist ri bu tio n

St at em en t

R em ar ks

Te ch ni ca l in fo rm at io n re ga rd in g m ili ta ry o r sp ac e ap pl ic at io ns

D ef en

C on tro lle d

Te ch ni ca l In fo rm at io n (C

TI

A pp lie d

R es ea rc h

FA

R S

2.

4.

an d D oD I

.2

D

IS

TR

IB

U

TI

O N

ST

TE

M

EN

T C

D is tri bu tio n au th or iz ed to

U .S

. G ov er nm en t

A ge nc ie s a nd th ei r c on tra ct or s, Ex po rt

C on tro lle d, (D at

e) . O er re qu es ts sh al l b e re fe rr

R

PA

M ic ro sy st em s Te ch no lo gy ff ic e.

FO

IA

E xe m pt io n m ay b e ap pl ic ab le

IT

A R a nd

E A

R

A lg or ith m s a nd m od el s f or pr ot ei n se pa ra tio n in fo rm ed b y da ta se ts

In te gr at io n or a pp lic at io n of ul ti-m od al a pp ro ac he s f or ot ei n se pa ra tio n.

fo rm at io n re ga rd in g th e ca pa bi lit y to p ur ify a t l ea st e pr ot ei ns o n on e pl at fo rm

In fo rm at io n re ga rd in g th e m an uf ac tu rin g of a p ur ifi ca tio n pl at fo rm th at c an p ur ify a t l ea st e pr ot ei ns

IS

TR

IB

U

TI

O

N S

TA

TE

M

EN

ro ve d fo r P ub lic

R el ea se

: D is tri bu tio n

U nl im ite d

Pr og ra m in fo rm at io n th at c ou ld c on st itu te an in di ca to r o f U

.S

G ov er nm en t in te nt io ns ca pa bi lit ie s, op er at io ns , o r ac tiv iti es o r ot he rw is e th re at en

/c om pr om is e op er at io ns se cu rit y

In te lli ge nc e

O pe ra tio

Se cu rit y

(O

PS

EC

Pr ov is io na l

A pp ro va l

-0

9-is tri bu tio n

St at em en t A ro ve d fo r Pu bl ic

R el ea se

D is tri bu tio n U nl im ite d

FO

IA

E xe m pt io n m ay b e ap pl ic ab le fo rm at io n or d at a de fin ed w ith in th e

C om m er ce C on tro l Li st (C

C L)

, U ni te d

St at es M un iti on s L is t

(U

SM

L) , o r a pp lie d lic en se a pp lic at io c on tro l e xp or t.

Ex po rt C on tro l Ex po rt

C on tro d

"5

SC

(c

U

SC

(g

U

SC

6;

U

SC

8( a)

; 2

C

FR

.9 (a

5)

(l)

(5

(a

FR

.4 (a

U

SC

7( a)

C

FR

.3

6.

(b

.1 (c

.5

(c

.9 ; 1

C

FR

su pp le m en t N o.

2"

IS

TR

IB

U

TI

ST

TE

M

EN

T C

D is tri bu tio n au th or iz

.S

. G ov er nm en t

A ge nc ie ei r c on tra ct or s, Ex po rt

C on tro d, (D at

e) . O qu es ts sh al l b e re fe rr

R

PA

M ic ro sy st em s Te ch no lo gy ff ic e.

FO

IA

E xe m pt io n m ay b e ap pl ic ab le

IT

A R a nd

E

R ll m at er ia l w ith e xp or t co nt ro ls w ill a ls o po st th e fo llo w in g no tic e:

W A

R N

IN

G

- T hi s d oc um en t c on ta in s te ch ni ca l d at a w ho ex po rt is re st ric te d by th e A rm s

Ex po rt C on tro l A ct

(T itl e

U

.S .C

Se c

, e t s eq or th e

Ex po rt C on tro l R ef or m A ct o f 2

(T itl e

, U

.S .C

C ha pt er

8, Se c.

1 -

V io la tio ns o f th es e ex po rt la w s a re su bj ec t t o se ve re c rim in al p en al tie s.

D is se m in at e in a cc or da nc e w ith ov is io ns o f D oD

IS

TR

IB

U

TI

O

N S

TA

TE

M

EN

ro ve d fo r P ub lic

R el ea se

: D is tri bu tio n

U nl im ite d

D ire ct iv e

.2

5.

-p ub lic d at a co nt ro lle d by a bu si ne ss o r in di vi du al a s pr op rie ta ry

Pr op rie

B us in es s In fo rm at io n

G en al

Pr op rie

B in es s

In fo rm at io n

(P R

O

PI

N

U

SC

U

SC

Fe de ra l

Em pl oy ee tra ct or s O nl y (F

ED

C

O N

Pe rf or m er s o w ne d in te lle ct ua l pr op er ty (I

P) th at m ay b e in ei r t ec hn ol og y de ve lo pm en t e ff or t.

FO

IA

E xe m pt io n m ay b e ap pl ic ab le

N ot hi ng

F ol lo w s*