A purple loop that works leaves behind the most valuable document in the security function. The findings register lists, with dates and owners, the weaknesses that the organisation has found and not yet fixed. The scenario library records which adversary behaviour the organisation tests and, by omission, which it does not. The emulation plans say when, where and with what credentials the testing runs. The agents that execute and observe the loop hold offensive capability and privileged access. Taken together these are an adversary's best map of the estate, drawn by the organisation itself. This chapter describes how to defend that map and the machinery around it. It concerns three stages of the purple loop: P1 Target, because the choice of scenarios and the scenario library are the first thing the loop produces and the first thing worth stealing or tampering with; P3 Observe, because findings are raised and stored there; and P4 Improve, because the work of turning a finding into a change moves findings, patches and detection content between people and tools. It also touches P2 Emulate, because the emulation agent is the loop's privileged insider, and says what can be undone and who can stop it.
The chapter builds on conclusions of the earlier volumes and does not repeat their method. AI Platform and Security, Chapter 19, concluded that containment must not depend on intent: an agent is governed as a well-meaning insider (a modelling device, not a claim about the agent), with task-scoped credentials, default-deny egress, control artefacts outside its reach, budgets and a stop path outside the system it stops (89, Nordqvist, 2026). AI Platform and Security, Chapter 16, added that models and datasets are supply-chain components with verifiable provenance. AI Red Team, Chapters 13 and 28, concluded that everything security AI reads may have been written by the adversary, so the defence is a policy decision point outside the model and a permission manifest that sets a ceiling on every action (90, Nordqvist, 2026). AI Blue, Chapter 15, applied this to the security operations centre (SOC) and treated its platform as tier 0 (94, Nordqvist, 2026). This chapter carries the same argument to the loop. The new element is that the loop's most sensitive content is not telemetry but knowledge about weakness, and that the loop's agents hold capability that the SOC's agents do not.
Before any control is chosen, the loop's assets are listed, because a protection regime that covers the obvious one (the findings) and misses the others (the plans, the credentials, the connectors) leaves the same map available by another route. Five kinds of asset recur.
Primary topics explored
- What the loop holds
- The findings register as a crown jewel
- The emulation agent as a privileged insider
- Supply chain of scenarios and tools
- Handling of findings in AI tools
- Detection of misuse
About AI Purple
AI Purple is Book 9 of The Transformed Architecture. It takes the loop between the red team and the blue team as its subject and asks what happens when AI sits on both sides of the table: the five stages of the loop (target, emulate, observe, improve, verify), rules of engagement and safe emulation, continuous emulation, the independence principle, coverage as a claim that needs evidence, the loop's own AI and how to defend it, operating models, decision rights, regulation, and the people involved, for European enterprises and public authorities.
It builds on the conclusions of Architecture as Code, AI Governance, AI Platform and Security, AI Red Team, AI Threat, The Transformed Security Architect, AI Boss and AI Blue.
Chief information security officers, heads of security operations, red-team leads, penetration testers, SOC managers, detection engineers, purple-team coordinators and incident commanders, security and AI architects, boards and management bodies, procurement leads, works councils and unions, data protection and audit functions, and public-sector leaders.
Gunnar Nordqvist
Conceived, directed and published the books of The Transformed Architecture.
Continue with the full chapter
Chapter 16: Defending the Loop's AI: Scenario Libraries, Findings and Emulation Agents as Tier 0 in AI Purple gives the detailed explanations, practical examples and implementation patterns behind this summary.
This whitepaper belongs to “The Loop's Own AI” and is one of 33 drawn from the manuscript.