Thanks for the reference! Found the 1974 paper https://web.archive.org/web/20030410020522/https://www.acsac... and the "Thirty Years Later: Lessons from the Multics Security Evaluation" followup https://web.archive.org/web/20030410095057/https://www.acsac...

Always neat to have lost sources show up eventually. Librarians rule.