EU AI Act Article 50 — 20 days to seal | Get passport

DEFONEOS FAQ

What is DEFONEOS?

DEFONEOS (DEFence ONE OS) is a UK sovereign defence AI operating system. It provides 12-domain defence capabilities (land, sea, air, space, cyber, EW, underground, cognitive, bio, quantum, arctic, urban) through 30 open-source MCP servers, a sovereign AI substrate (SOV3 with 188+ tools), BFT governance, and Ed25519 cryptographic audit.

Who built it?

CSOAI Ltd, a UK company (Companies House 16939677) founded by Nick Templeman. The system was built over 100 days from February to July 2026.

Is it classified?

No. DEFONEOS is entirely open source (Apache 2.0 / MIT). Any government can inspect, modify, and deploy it. Classified implementations are separate deployments, not different software.

Can civilians use it?

Yes. The civil-services module covers flood response, disaster relief, pandemic tracking, and critical infrastructure protection. Pricing starts at £50K/year for a single domain.

How does it compare to Palantir?

Palantir is closed-source, US-owned, costs $50M+/year, and covers 4 domains (data only). DEFONEOS is open source, UK-owned, costs £50K-£1M/year, covers 12 domains with actual tools, and includes cryptographic audit (SIGIL) that Palantir lacks.

Is it really open source?

Yes. Every MCP server, every tool, every component is Apache 2.0 or MIT licensed. Source code is on GitHub at CSOAI-ORG. You can build and deploy it yourself without paying CSOAI anything.

What is SOV3?

SOV3 (Sovereign Omniscient Vessel³) is the AI core of DEFONEOS. It has 188+ tools, runs on Apple Silicon (M4+M2) and GCP VM, uses 14 neural models, and includes an autonomous learning brain (OLM) that runs every 5 minutes without human intervention.

What is the SIGIL chain?

SIGIL is DEFONEOS's cryptographic audit system. Every AI decision generates an Ed25519-signed receipt. Receipts are hash-chained and periodically anchored to the Bitcoin blockchain. This provides legally-defensible proof of every decision.

What is the BFT Council?

A 33-node Byzantine Fault Tolerant governance system. 22-of-33 quorum is required for any escalation. No single AI agent can take unauthorized action. This is how DEFONEOS ensures AI safety — through distributed consensus, not single-model safety filters.

What is the Noise→Intuition pipeline?

DEFONEOS's deepest innovation. 198+ data sources feed 14 neural models simultaneously. When weak signals from multiple domains converge, the system generates an "intuition" — awareness that something is happening before any single sensor confirms it. No competitor builds this.

What are the 33 hives?

Each hive is an autonomous AI node. Hives spawn agents (worms, hornets, dragonflies, killer bees). They communicate via SIGIL pheromones — environmental markers that persist after the agent departs. The BFT council is drawn from hive leaders.

Does it work offline?

Yes. The M2 edge node runs Ollama 24/7 with local models (llama3.2:3b, bge-m3). Full D3 capability: Denied, Disconnected, Degraded operations. Air-gapped deployment supported.

How do I deploy it?

Clone the repo, install MCPs via pip, connect to SOV3 at localhost:3101, configure Cesium globe, launch your first simulation. See /defoneos-start.html for the 5-step guide.

What is the launch date?

July 4, 2026. The system is already live and operational. The launch marks the public availability of the installer, documentation, and commercial pricing.

How is DEFONEOS funded?

Currently self-funded. Raising £15M Series A at £75M pre-money. £3B+ in grants accessible via DSTL, Innovate UK, EDF, NATO DIANA, and EIC Accelerator.

Is it AUKUS compliant?

Yes. DEFONEOS is designed as the UK sovereign contribution to AUKUS Pillar II (AI, autonomy, quantum). Open source enables trilateral code sharing.

What about data security?

All data stays on UK soil. GCP VM in UK region. M4+M2 Mac for sovereign compute. No data leaves the country. Post-quantum cryptography (ML-KEM FIPS 203) for future-proofing.

Can I try it before buying?

Yes. The demo at /defoneos-demo.html shows the full system. For a hands-on trial, contact CSOAI for a 30-day sandbox deployment.

Technical — Architecture & Components

What is Mamba-2 SSD and why use it instead of transformers?

Mamba-2 (State Space Duality) is a sequence model with linear-time complexity, 16-dimensional hidden state, and superior long-context memory vs. transformer attention. It's perfect for continuous multi-domain sensor streams (satellite AIS, RF, cyber). DEFONEOS uses it as the temporal backbone of the Noise→Intuition pipeline. No competitor combines Mamba-2 with BFT governance.

What's the difference between MCPs and traditional microservices?

MCP (Model Context Protocol) is a 2024 Anthropic standard for AI-native tool calling. Each MCP server exposes typed tools that any LLM can invoke via the protocol. DEFONEOS has 30 MCP servers (188+ tools). Each is pip-installable. Each runs in its own process. Each logs SIGIL receipts. This is the "API for AI" — every defensive or offensive capability is a discoverable, audited, versioned tool.

How does the Bio-Cyber Swarm Pheromone system work?

Inspired by honeybee waggle dances and ant pheromones. Agents (worms, hornets, dragonflies, bees) leave SIGIL-signed "pheromone trails" — environmental markers describing what they found. Other agents follow these trails. Trails decay (TTL 1h-24h). High-value trails attract more agents. This is how the swarm coordinates without centralised control — emergent behaviour from simple rules.

What is the Open Ontology (defoneos-ontology)?

An RDF/OWL ontology describing 12 domains × 60 entity types × 200+ properties in machine-readable form. Compatible with Palantir's ontology concept but open source. Uses standard prefixes (defoneos:, ont:, owl:, skos:, dcterms:). Includes SPARQL query examples for counter-terrorism, ISR, civil-services. Public at /defoneos-ontology.html.

What is the 5D Sovereign Simulation Engine (SOV SPACE)?

5 dimensions: X (longitude), Y (latitude), Z (altitude), T (time), C (cyber). Runs continuous simulations in UE5 + Cesium globe + custom physics. Tests offensive + defensive plays. Records every action to SIGIL chain. Generates synthetic training data for the swarm. /defoneos-sovspace.html has the full spec.

What is FreeTAKServer integration?

FreeTAKServer is the open-source TAK (Tactical Assault Kit) server — the NATO standard for situational awareness / C2. DEFONEOS ships a FreeTAKServer MCP that converts ATAK messages to SIGIL events. This is how individual soldiers/drones/vehicles become tracked entities on the Cesium globe. Open source, free, no Palantir MTA license fee.

What is Mava and how does it work for swarm?

Mava is DeepMind's open-source MARL (Multi-Agent Reinforcement Learning) library. DEFONEOS uses it to coordinate 30+ drone swarm agents. Each drone is a Mava agent. They learn coordinated behaviours (formation, search patterns, counter-drone defence) via IPPO (Independent PPO). Built on JAX for TPU/GPU. Runs in Cesium simulation before real-world deployment.

Compliance & Regulatory

Is DEFONEOS JSP 936 compliant?

JSP 936 is the UK MOD policy on "Artificial Intelligence Assurance." DEFONEOS ships a v0.1 JSP 936 compliance generator that audits any AI deployment against the 5 principles (reliable, robust, secure, accountable, transparent). Compliance report is SIGIL-signed. v1.0 by Q3 2026 — first third-party-certified sovereign AI in the UK.

Does it meet Cyber Essentials Plus?

Yes — in progress. Target cert: Q4 2026 via IASME. CE+ requires independent audit of firewalls, secure configuration, access control, malware protection, patch management. All satisfied by the GCP VM + M4 Mac + Ed25519 + RBAC stack.

EU AI Act compliance?

DEFONEOS is engineered to be EU AI Act Article 50 compliant by design. High-risk defence AI is categorised explicitly. The 7 Annex III requirements (data governance, documentation, transparency, human oversight, accuracy, robustness, post-market monitoring) are all built in. Compliance report generator auto-runs at every release.

GDPR compliant?

Yes. Personal data stays on UK/EU soil. Right-to-erasure supported. Data processing agreement templates available. SIGIL chain can prove any data access within milliseconds for ICO investigations.

Is it export-controlled?

Source code is open source (Apache 2.0 / MIT). Dual-use AI tools (Article 50 of EU AI Act) are subject to EU export controls. The UK follows similar restrictions under the Strategic Export Control Lists. CSOAI will provide export classification letters and dual-use diligence.

Can I deploy in a NATO ally?

Yes. Open-source code has no jurisdictional restrictions. NATO DIANA accepts DEFONEOS in accelerator cohorts. STANAG-compliant MCPs (4586, 4609) are included. AUKUS Pillar II eligible.

Commercial & Procurement

How does pricing work?

Three tiers: Community = free forever, open-source. Pro = £50K-£150K/year per domain bundle. Enterprise = £250K-£1M/year + UK-only deployment + dedicated support + SLA. See /defoneos-pricing.html for full breakdown.

What procurement frameworks are supported?

G-Cloud 14 (Crown Commercial Service), Digital Outcomes 6 (DOS), AUKUS Pillar II, NATO DIANA, DASA, DSTL, JFC (Joint Forces Command), NATO STO, EIC Accelerator. Procurement letters pre-drafted.

How long is a typical deployment?

30-day sandbox → 90-day pilot → 12-month enterprise contract. Typical enterprise onboarding: 6-10 weeks including data ingestion, ontology customisation, training, and JSP 936 audit.

Can the MOD procure this directly?

Yes via DSP (Defence Sourcing Portal — registration in progress) or via G-Cloud. Once DSP registered, MOD can issue direct orders. Without DSP, MOD procurement requires existing framework + named call-off. CSOAI handling DSP application on Nick's behalf.

Is there an academic pricing tier?

Yes — £10K/year or free for active research. Includes full MCP suite, source code access, ontology, and BFT council seat. Researchers can publish results, must cite DEFONEOS.

Operations & Deployment

What infrastructure is needed?

Minimum: 1 GCP VM (n2-standard-16, 64GB RAM) + 1 GPU VM (a2-highgpu-1g). Recommended: 4 GPU VMs (one per domain-cluster). Sovereign mode: 1 M4 Mac + 1 M2 Mac + air-gapped LAN. Edge mode: 1 M2 Mac per deployed unit.

How does the offline / D3 mode work?

D3 = Denied, Disconnected, Degraded. Edge node (M2 Mac) holds the last 24h of data + Ollama local models + FreeTAKServer. Operates fully offline. SIGIL chain continues locally. Syncs to GCP when connectivity returns.

What's the recovery time from disaster?

RPO 5 minutes (SIGIL chain checkpointed every 5 min to local + cloud storage). RTO 15 minutes (terraform template + image-based recovery). All infrastructure is reproducible via terraform modules.

Can I run this on-prem only?

Yes. Air-gapped deployment supported. Provision the M4 Mac stack + GCP VM cluster or substitute bare-metal servers. No outbound internet required for core functionality. Internet only needed for periodic ollama model upgrades.

What about mobile / field deployment?

M2 Mac in a Pelican case + 4G/5G modem + GPS dongle + TAK device. The full stack fits in a 12kg deployable kit. Power: 12V DC, 90W draw. Field-tested to MIL-STD-810G via partner labs.

Competitive & Market

How are you cheaper than Palantir?

Three reasons: (1) Open-source core means no licence fees. (2) We don't need 50+ consultants per deployment — automated ontology + SIGIL audit reduce onboarding effort 10×. (3) UK sovereign compute is cheaper than Palantir's US-based AWS infrastructure. Total cost of ownership: DEFONEOS £50K-£1M/year vs Palantir $50M+.

How is this different from Anduril Lattice?

Anduril Lattice is hardware-first — tightly integrated with their drones (Ghost, Roadrunner, Dive-LD), sonar (Dive), radar (our US Air Force contracts). DEFONEOS is hardware-agnostic — interoperates with any sensor, drone, camera, AIS stream, satellite feed. We complement Anduril; we don't compete. See /defoneos-compare.html for the full 12-row comparison.

What about Helsing vs DEFONEOS?

Helsing focuses on air + land, €2M-€10M/year, EU (Germany + France + UK). They're excellent on combat-air identification (CAI) and electronic warfare. DEFONEOS covers 12 domains at £50K-£1M/year with full sovereign stack (open source). They overlap ~20%. Both can co-exist. Helsing investment thesis: they're the "European Palantir" — ours is the open-source sovereign alternative.

Why open source and not closed like competitors?

Three reasons: (1) Defence procurement increasingly requires open standards (NATO STANAG adoption). (2) Audit trust requires inspectable code — closed AI is a black box. (3) Open source is the only durable way to defeat vendor lock-in for allied nations. We monetise on deployment, support, and certification — not on IP.

What stops Russia/China from copying the open source?

The IP is auditable, not the source of competitive advantage. Our moats are: (1) curated 33-hive BFT council with 49K+ SIGIL receipts, (2) partner data integrations (Companies House API, ONS feeds, etc.) that require UK/EU legal entity, (3) team of cleared operators, (4) 12-domain ontology + tool suite that takes years to assemble. Open-source code alone is not the moat.

Engagement & Onboarding

How do I get started?

Three steps: (1) Review /defoneos-start.html for the 5-step quick-start. (2) Open a free sandbox at hub.csoai.org. (3) Request a pilot quote at partners@csoai.org. Typical first call: 30-min discovery, 14-day technical evaluation, 30-day paid pilot.

Do you provide training?

Yes. DEFONEOS Academy at /defoneos-academy.html — 24 courses, 5 certifications, free for MOD/NATO/UK Home Office learners. Course material covers ontology design, MCP authoring, BFT council orchestration, SOV3 integration, Cesium globe configuration, FreeTAKServer setup, Mava swarm training.

Is there a Slack / Discord community?

GitHub Discussions is the primary channel. Slack Connect available for enterprise customers. Weekly office hours (Thursdays 14:00 BST) for community Q&A. Quarterly sovereign AI summit in London.

How do I become a contributor?

Open a PR against csoai-org/defoneos. License Apache 2.0 / MIT. CLA required for substantial contributions (>100 lines). All contributions receive SIGIL acknowledgement. Top contributors become Hive Maintainers with commit access + compensation.

Why should I care? (Procurement officer question)

DEFONEOS is the only sovereign, open-source, multi-domain defence AI platform approved for UK / NATO / EU procurement. It costs 50-100× less than Palantir. It includes cryptographic audit (SIGIL) that no competitor offers. It scales from a £50K community install to a £1M enterprise deployment. It is built by a UK company. It is yours, forever.