DEFONEOS × Five Eyes

The UK's sovereign AI contribution to the Five Eyes intelligence alliance. Five nations, five sovereign instances, one interoperable protocol. UK-owned. UK-governed. Not subject to US CLOUD Act.

The Five Eyes Alliance

Five Eyes (FVEY) is an intelligence alliance dating to the 1946 UKUSA Agreement, comprising five English-speaking nations. It is the most extensive intelligence-sharing partnership in the world.

How DEFONEOS Serves Five Eyes

The Sovereignty Problem

The core challenge for Five Eyes AI: intelligence agencies need shared AI tools, but cannot use US-owned platforms (like Palantir) without exposing their data to US legal jurisdiction (CLOUD Act, FISA Section 702, Executive Order 12333). Each nation needs AI capability without handing sovereignty to another nation's vendor.

DEFONEOS: Five Sovereign Instances

DEFONEOS solves this by deploying five sovereign instances — one per nation — connected via the A2A protocol. Each instance is owned, operated, and governed by its host nation. No shared cloud. No central vendor. No single point of legal compulsion.

Classification Handling

DEFONEOS supports Five Eyes classification markings natively. Every SIGIL receipt carries classification metadata. Access control is enforced via DID-based identity (W3C DID + Ed25519 keys).

What Each Nation Contributes

🇬🇧 UK — DEFONEOS Origin (GCHQ / NCSC)

DEFONEOS is UK-built. The UK contributes:

• The DEFONEOS platform itself — 30 MCP servers, SOV3 hub, BFT council, SIGIL chain
• NCSC guidance compliance — Cyber Essentials, 10 Steps to Cyber Security, cloud security principles
• JSP 936 compliance generator — UK MOD AI governance standard
• GCHQ threat intelligence feeds (classified extension, not shared)
• Yorkshire Digital Twin — reference implementation for flood/emergency response

🇺🇸 US — Interoperability Partner (NSA / Cyber Command)

The US contributes:

• STORMBREW / TURMOIL integration adapters (classified, US-only extension)
• NIST AI RMF alignment — DEFONEOS maps to NIST AI Risk Management Framework
• NIST PQC migration — DEFONEOS uses NIST-standardised ML-KEM-768 and ML-DSA-65
• DARPA AI research pipeline — cutting-edge model absorption
• CISA cybersecurity feeds — CVE monitoring, threat indicators

🇨🇦 CA — Arctic Domain (CSE)

Canada contributes:

• Arctic domain monitoring — NORAD North Warning System integration
• CSE cyber threat intelligence — national-level feeds
• Canadian Sovereign Cloud — Shared Services Canada hosting
• AI safety research — CIFAR (Canadian Institute for Advanced Research) partnerships

🇦🇺 AU — Indo-Pacific Domain (ASD)

Australia contributes:

• Indo-Pacific SIGINT — ASD's Pine Gap + Shoal Bay receiving stations (classified)
• AUKUS Pillar II — DEFONEOS is the UK contribution, interoperable with AU deployments
• DSTG defence science — Defence Science & Technology Group research pipeline
• IRAP compliance — Information Security Registered Assessors Program

🇳🇿 NZ — South Pacific Domain (GCSB)

New Zealand contributes:

• South Pacific monitoring — Waihopai and Tangimoana stations (classified)
• Small-nation perspective — governance models for smaller Five Eyes partners
• Environmental monitoring — Southern Ocean, Antarctic approaches

Federated Intelligence Architecture

  🇬🇧 UK                          🇺🇸 US                          🇨🇦 CA
  ┌──────────┐                    ┌──────────┐                    ┌──────────┐
  │ GCHQ     │◄───── A2A ────────►│ NSA      │◄───── A2A ────────►│ CSE      │
  │ DEFONEOS │     SIGIL chain    │ DEFONEOS │     SIGIL chain    │ DEFONEOS │
  │ :3101    │◄──────────────────►│ :3101    │◄──────────────────►│ :3101    │
  └────┬─────┘                    └────┬─────┘                    └────┬─────┘
       │                               │                               │
       │          🇦🇺 AU               │          🇳🇿 NZ               │
       │          ┌──────────┐         │          ┌──────────┐         │
       └──────────► ASD      │◄────────└──────────► GCSB     │◄────────┘
                  │ DEFONEOS │                      │ DEFONEOS │
                  │ :3101    │                      │ :3101    │
                  └──────────┘                      └──────────┘

  Each nation:
  ✅ Owns its instance        ✅ Controls its data        ✅ Governs its AI
  ✅ Hosts on own soil        ✅ Signs own SIGIL chain    ✅ Sets own BFT council

  Shared (via A2A protocol):
  📡 OSINT data (GDELT, Sentinel, AIS)    🔗 SIGIL proof chain    🤝 BFT governance votes

Legal & Regulatory Position

Why DEFONEOS Is Safe for Five Eyes

DEFONEOS vs Palantir for Five Eyes

Classification-Aware SIGIL Example

{
  "ts": 1782620774.443,
  "classification": "REL TO FVEY",
  "caveats": "",
  "line": "V|csoai-org|nato|Threat assessment: vessel 47 exhibiting spoofing behaviour",
  "agent_id": "uk-gchq-threat-analyst-007",
  "agent_clearance": "SC",
  "parameters": {"vessel_mmsi": 247123456, "sector": "eastern-med"},
  "result": {"confidence": 0.87, "pattern": "AIS-spoofing-detected"},
  "digest": "sha256:7f3a8e2d1c4b5a6f...",
  "signature": "ed25519:9a3f8e2d1c4b5a6f7e8d9c0b1a2f3e4d5c6b7a8f9e0d1c2b3a4f5e6d7c8b9a0f",
  "prev_hash": "a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2",
  "access_control": {
    "did_required": true,
    "clearance_minimum": "SC",
    "nationalities": ["GBR", "USA", "AUS", "CAN", "NZL"],
    "marking": "REL TO FVEY"
  },
  "bitcoin_anchor": "1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa"
}

Human Gates (Require Nick's Action)

Timeline