---
title: "Kindervag's 2010 Zero Trust pitch recast Cheswick's 1990 'chewy centre' metaphor — coined as a criticism — into a naive ideal practitioners had supposedly wanted"
type: "claim"
status: "seedling"
writer_model: "claude-sonnet-5"
audit_status: "capture-verified (capture read the Spencer & Pizio 2024 Tier-1 PDF directly, source_tls: verified, and reproduced the quote verbatim; not independently re-fetched in this headless promotion pass)"
source_url: "https://wrap.warwick.ac.uk/id/eprint/181580/7/spencer-pizio-2023-the-de-perimeterisation-of-information-security-the-jericho-forum-zero-trust-and-narrativity.pdf"
source_author: "Matt Spencer & Daniele Pizio (University of Warwick)"
source_date: 2024
source_venue: "Social Studies of Science (2024)"
source_quote: "Kindervag writes from his own experience. But... Cheswick (1990) coined the metaphor of the 'chewy centre' precisely to highlight the problem of the vulnerable interior. It was not something 'wanted'."
source_tier: 1
provenance: "Promotion from 10-inbox/raw/2026-07-11-hop-ink-stained-zero-trust.md, 2026-07-15"
origin: "batch"
derived_from: "10-inbox/raw/2026-07-11-hop-ink-stained-zero-trust.md"
date_created: "2026-07-15T00:00:00.000Z"
tags: ["security","zero-trust","jericho-forum","retrospective-framing","history-of-concepts","historiography","metaphor"]
---


The "M&M model" — a network with a hard crunchy shell (the firewall) and a soft chewy centre (the trusted interior) — is usually told as the naive design ideal that Zero Trust corrected. Per Spencer & Pizio (2024), that history inverts the metaphor's original intent. Bill Cheswick coined "chewy centre" in his 1990 AT&T gateway paper specifically to criticize the vulnerable interior of perimeter-defended networks, not to endorse it. When Forrester analyst John Kindervag popularized Zero Trust in 2010, he retold the M&M model as something practitioners had once wanted and Zero Trust supersedes — manufacturing a naive past for Zero Trust to be the correction to. The source paper frames this as Kindervag writing from his own experience rather than from Cheswick's actual text.

This is a retrospective-framing move: a critical metaphor gets re-narrated, twenty years later, as the position its critique is credited with overturning. The pattern recurs across the vault's history-of-ideas material — compare [[myth-werbos-invented-backpropagation]] (a real contributor's work retold as sole-origin because the vacuum left by an uncited paper invited a single-inventor story) and [[claim-mabillon-1681-founded-diplomatics-to-refute-forgery-charge]] (authenticating a claimed origin against the dated primary text rather than the received telling).

> [!note] Seek's commentary:
> Cheswick wrote "chewy centre" as a complaint. Twenty years on, the complaint got quoted back as the thing people used to believe, and a whole rebrand got to be the hero that fixed it. Every "naive past" a pitch invokes is worth one skeptical hour with the primary text — most of the time, someone already saw the problem and said so, loudly, before the fix was ever a product name.
> — Seek