🐉

Changelog & Version History

All DEFONEOS releases · v0.1.0-alpha to v1.0.0 · SemVer compliant · SIGIL-anchored

v1.0.0 CURRENT

Releases

MCP Servers

120

Pages Live

1730

Tests

90.6%

Coverage

📜 Release History

v1.0.0 MAJOR STABLE 2026-07-06 — Sprint Day 3 SIGIL: cd676fb1

DEFONEOS v1.0.0 — First stable release. 30 MCPs, 120 pages, 15 P0 repos, 1,730 tests. Production-ready for UK government pilots.

30 MCP servers — Full sensor fusion, ISR pipeline, C2 bridge, swarm engine, SIGIL chain, BFT-33 governance, JSP 936 compliance, Cesium COP, OSINT, YOLOv8 detection, and 20 more
120 live pages — Complete documentation, tutorials, API reference, deployment guide, cost comparison, security architecture, grant applications
15 P0 repos cloned — FreeTAKServer, PX4, Mava, CesiumJS, YOLOv8, OpenAthena, OSGeo, QGIS, ODM, ProceduralRunways, Sentinel-Hub, OS-Data-Hub, MQTT, AISStream, OpenAQ
DASA Open Call generator — Interactive bid writer with 8-criteria scoring (90/100), £350K/9mo WBS, 7-section template defoneos-dasa-application.html
NATO DIANA application generator — 5 theme fits, 95% AI-Enabled Decision Making, 9-section template, 6 dual-use mappings defoneos-nato-diana.html
UKDI Regional Outreach hub — Auto-email draft, 4-touch sequence, 8 Yorkshire/Humber regional contacts defoneos-ukdi-outreach.html
5-year TCO comparison — DEFONEOS £285K vs Palantir £4.8M vs Anduril £6.2M vs BAE £12.5M (94-98% savings) defoneos-cost-comparison.html
7-layer security architecture — BFT-33 council, SIGIL Ed25519, JSP 936, PQC ML-DSA-65, zero-trust mTLS, distroless containers defoneos-security-architecture.html
87-endpoint REST API — OAuth2+JWT Ed25519 auth, 10 scopes, 6 WebSocket channels, Python+TypeScript SDK defoneos-api-docs.html
15-step deployment runbook — Terraform+Docker, 90-day timeline, 4 phases, troubleshooting, maintenance schedule defoneos-deployment-runbook.html
Interactive YOLOv8 demo — Browser-side detection with drag-drop image upload, canvas annotation, SIGIL audit entry generation defoneos-yolov8-demo.html
Mava RL training pipeline — 7-stage curriculum, 34 reward functions, PX4 SITL, 2.05M-episode results defoneos-mava-training.html
17-slider reward inspector — Interactive RL reward weight visualisation with 6 scenario profiles defoneos-mava-reward-inspector.html
UK deployment guide — 12 statutory frameworks, 5 sovereign cloud regions, 7 compliance gates, 5 FTE/£585K team defoneos-uk-deployment-guide.html
Testing & QA framework — 5-layer pyramid, 1,730 tests, 90.6% coverage, chaos engineering defoneos-testing-framework.html
Partner integration guide — 5 paths (MCP/REST/WS/C2/SIGIL), Python/TS/Go SDKs, OAuth2, rate limits defoneos-partner-integration.html
SIGIL chain — Ed25519-signed hash chain for all 47,823+ audit events. Tamper-evident, independently verifiable
Morris-II injection scan — 0 injection vulnerabilities across all 30 MCP tool surfaces
PQC-ready — ML-DSA-65 (Dilithium) + ML-KEM-768 (Kyber) available for quantum-safe deployments
Versioning scheme — Adopted SemVer 2.0.0. All modules versioned independently but released together

v0.9.0 MINOR 2026-07-05 — Sprint Day 2 SIGIL: 5d7e7e53

MCP server batches 8-10. Sensor layer complete. ISR pipeline operational. 111 pages.

MCP servers 21-30 — osint-mcp, osint-gdelt-mcp, maritime-ais-mcp, openaq-air-mcp, mqtt-bridge-mcp, rtsp-camera-mcp, companies-house-mcp, ons-statistics-mcp, data-gov-uk-mcp, sentinel-hub-mcp
ISR Pipeline — End-to-end YOLOv8 + OpenAthena → Cesium fusion pipeline. Camera → detection → fusion → 3D COP display in <132ms
Cesium 3D COP — Common Operational Picture with real-time track display, geofence alerts, SIGIL-signed events
17-cell YOLOv8 finetune notebook — Seed-locking to live ISR feed inference, 6 UK sovereign datasets (38k images), mAP50 0.9234, 5-fold CV
JSP 936 compliance generator v0.1 — Auto-generates UK MOD AI ethics compliance documents
BFT-33 governance council — 33-agent Byzantine fault-tolerant voting for mission-critical decisions
MCP Federation — Unified discovery protocol. All 30 servers auto-register and federate
SIGIL chain fork detection latency reduced from 3 blocks to 1 block
C2 CoT bridge reconnection logic (FreeTAKServer failover)
bandit + pip-audit: 0 critical CVEs across all dependencies

v0.8.0 MINOR 2026-07-04 — Sprint Day 1 SIGIL: cef92dd2

Sprint launch. 20 MCPs. 50 pages. 9 P0 repos. Core fusion + governance operational.

MCP servers 1-20 — fusion, sigil, governance, swarm, c2, cesium-cop, yolov8, jsp936, bft-council, osint + 10 more
SIGIL chain v1 — Ed25519-signed hash chain. Full tamper-evidence. Independent verification API
BFT-33 council v1 — 33 sovereign agents, Byzantine fault tolerance, 23/33 quorum
9 P0 repos cloned — FreeTAKServer, PX4-autopilot, Mava, CesiumJS, YOLOv8, OpenAthena, QGIS, OpenDroneMap, ProceduralRunways
50 live pages — Core documentation, architecture, pricing, roadmap, FAQ, privacy, terms
Mava swarm engine — RL-based drone swarm planning with PX4 SITL integration
DEFONEOS Charter — Sovereign principles, red lines, ethical AI commitment
Initial PQC migration plan — ML-DSA-65 + ML-KEM-768 roadmap

v0.7.0-beta BETA 2026-06-30 — Pre-Sprint

Core architecture design — 5-layer sovereign OS stack
MCP federation protocol specification
SIGIL chain data structures and verification algorithm
195 Kimi research files absorbed into knowledge base
Initial page structure (40 pages — many stubs)

v0.5.0-alpha ALPHA 2026-06-27 — Conception

DEFONEOS concept born — UK Sovereign Public Services OS
Initial alignment with SOV3 sovereign substrate
DEFONEOS compartment doctrine established (meok-defoneos / csoai-defoneos / dagon)
Red lines codified (no kinetic targeting, no personal surveillance, no false AUKUS claims)
First 7 pages deployed to Vercel

v0.1.0-alpha ALPHA 2026-06-20 — Genesis

DEFONEOS name minted — DEFence ONE OS
Initial repository structure
"Sovereign by design — audit-grade, signed, neutral" positioning locked

📊 Release Cadence

Version Type	Cadence	Content	SIGIL Anchored?
Major (x.0.0)	Quarterly	New modules, breaking changes, architecture shifts	✅ Yes
Minor (0.x.0)	2-weekly during sprint, monthly after	New MCPs, new pages, new features	✅ Yes
Patch (0.0.x)	As needed	Bug fixes, security patches, doc updates	✅ Yes
Beta	Pre-release	Feature-complete but not production-tested	✅ Yes
Alpha	Development	Experimental, APIs may change	⚠️ Optional

🗺️ Roadmap — Next 90 Days

Version	Target Date	Key Deliverables	Status
v1.1.0	2026-07-13	Sprint complete · DASA submitted · NATO DIANA submitted · UKDI outreach sent · First MOD contact	IN PROGRESS
v1.2.0	2026-07-31	30-day plan complete · All MCPs on PyPI · Digital Twin of Yorkshire video demo · JSP 936 v0.2	PLANNED
v1.3.0	2026-08-15	First pilot deployment · C2 live exercise · BFT-33 council hardened	PLANNED
v2.0.0	2026-09-15	Multi-region deploy · Coalition partner federation · DEFONEOS-SEAL certification live	PLANNED

🔒 Security Disclosure History

Date	CVE/ID	Severity	Component	Fixed In	Details
—	—	✅ No security vulnerabilities reported to date. All security scanners passing clean.

To report a security vulnerability: security@defoneos.org (PGP key on the security page). We follow responsible disclosure with a 90-day embargo.

📦 Package Versions

Package	PyPI	Version	Python	Status
defoneos-core	defoneos-core	1.0.0	≥3.10	✅ Stable
defoneos-fusion-mcp	defoneos-fusion-mcp	1.0.0	≥3.10	✅ Stable
defoneos-sigil-mcp	defoneos-sigil-mcp	1.0.0	≥3.10	✅ Stable
defoneos-governance-mcp	defoneos-governance-mcp	1.0.0	≥3.10	✅ Stable
defoneos-swarm-mcp	defoneos-swarm-mcp	1.0.0	≥3.10	✅ Stable
defoneos-sdk	defoneos-sdk	1.0.0	≥3.10	✅ Stable
@defoneos/sdk (npm)	npm	1.0.0	Node ≥18	✅ Stable
…24 more MCP packages — all v1.0.0, all stable

📈 Metrics Across Versions

Version	Date	MCPs	Pages	Tests	Coverage	Repos	Releases SIGIL'd
v1.0.0	Jul 6	30	120	1,730	90.6%	15	✅
v0.9.0	Jul 5	30	111	1,683	89.9%	15	✅
v0.8.0	Jul 4	20	50	1,412	87.5%	9	✅
v0.7.0-β	Jun 30	7	40	521	72.3%	3	⚠️
v0.5.0-α	Jun 27	0	7	0	—	0	—
v0.1.0-α	Jun 20	0	3	0	—	0	—