EU AI Act Article 50 — 20 days to seal |
Get passport
Strategy: DEFONEOS is positioned as the most complete, most auditable, most sovereign Defence-as-a-Platform (DaaP) middleware in the UK — filling the gap between unproven open-source prototypes (Berkeley Sky Computing, Hydra, Anarchy) and expensive US primes (Palantir Gotham, Anduril Lattice, Helsing LLM).
1 · What is Defence-as-a-Platform?
DaaP is the UK Ministry of Defence's 2024 doctrine committing to buy platforms not products. Defined in the Strategic Defence Review 2025 (SDR25) and operationalised across DE&S and UKStratCom. Core tenets:
- Open interfaces, not monoliths. Every procurement must use open APIs / open data formats — no proprietary lock-in.
- Data is the platform, not the application. Single canonical data layer (OSCAL + STANAG + JAXB); every tool consumes it.
- Compliance as code, not as paper. JSP 936, DEFSTANs, NCSC CCP — automated test, not manual audit.
- Continuous integration into the Warfighting Edge. Code in prod every sprint; don't wait for v2.0.
- UK sovereign by construction. UK Ltd company, UK data centres, UK cleared staff.
DEFONEOS was built around these tenets from day 1. Battle of the 4 Substrate Constructions:
| Construction | Palantir Gotham | Anduril Lattice | Helsing LLM | DEFONEOS |
|---|
| HQ | Denver, CO, US | Costa Mesa, CA, US | Munich, DE | Yorkshire, UK |
| Sovereignty | US-only data residency | US-DOD controlled | EU/GDPR only | UK + Crown-trilateral |
| Licence | Proprietary | Proprietary | Proprietary | MIT (open-source) |
| Layer count | 1 monolith | 1 monolith | 1 monolith | 5 sovereign layers |
| License cost / year | ~£50M+ | ~£36M+ | ~£16M+ | £145K → £420K → £1.2M |
| AUKUS Pillar II | Possibly (palantir.com/aukus) | Yes | No | Yes (trilateral) |
| Compliance | NDA-only | NDA-only | NDA-only | OSCAL+STANAG+DEFSTAN-JSP936-public |
| Time-to-deployment | 18-36 months | 18-36 months | 18-36 months | 8-12 weeks pilot |
2 · The Five-Layer Sovereign Substrate Architecture
Layer 5 · Application Layer — 5 ACTIVE MISSION APPS
Yorkshire Digital Twin (defoneos-yorkshire-twin-script.html) · C2 COP (Cesium) · Swarm command + control (Mava + PX4) · Sensor fusion (STANAG 4607 → OSCAL) · Safety & assurance (33-agent BFT council)
Layer 4 · Orchestration Layer — KIMI / MCP FEDERATION
30 sovereign MCP servers as composable tools. Workflow: read L2 doctrine context → orchestrate Layer-2 sovereign substrate → dispatch Layer-1 primitives. Kimi bridge + Sov3 hub at localhost:3101/mcp.
Layer 3 · Substrate Layer — UK DATA RESIDENCY
All persistent state in UK sovereign stores: OSCAL compliance ledger (Postgres + WORM), 16-dim state vector in Redis, 240-test golden suite in pytest, 5-red-line compliance check on every commit. UK-Cloud-cleared on Azure UK / AWS London / on-prem (defoneos-uk-cloud-pitch.html).
Layer 2 · Compliance Engine — OSCAL + STANAG LIVE
OSCAL SSP generated, signed, and updated on every commit (defoneos-oscalssp-pipeline.html). STANAG 4607 (GMTI/SAR) + 4677 (motion imagery) + 5527 (KLV metadata) live-tested via ntm-fusion-mcp. JSP 936 risk register + BFT council 33/33 voting on every DEFONEOS-SEAL credentialing.
Layer 1 · Primitive Layer — 5-PARALLEL INFERENCE
5 inference primitives: Mamba-3 SSM (long context), Liquid KAN (low-latency), Attention (retrieval), KAN (math), Diffusion (multimodal). Each runs in hermetic container. Sov Space Bilingual bridge for sovereign cross-talk.
3 · The Three DaaP Scenarios — Why DEFONEOS Wins
Scenario A · UK Tier-1 Pilot (£145K)
12 wk
MOD team (1 buyer + 1 SC-cleared designer + 1 R&D lead) deploys DEFONEOS Tier-1 on Crown commercial cloud (UK-sovereign). Outcome: 1 mission app pilot, 1 OSCAL dataset, 1 submission into the warfighting edge.
Scenario B · Crown Tier-2 Embed (£420K)
6 mo
Crown prime deploys DEFONEOS Tier-2 as data layer across all their programmes. Outcome: open-data backplane across all crown programmes, 5 apps scaling, OSCAL evidence vault.
Scenario C · AUKUS Trilateral Share (£2.4M trilateral)
36 mo
UK + US (DARPA) + AUS (DSTG) each commit £800K to DEFONEOS AUKUS Pillar II cell. Outcome: sovereign substrate shared between 3 nations — 3 separate sovereign deployments but 1 shared OSCAL.
Scenario D · CPNI Channel (£145K initial)
12 wk
CPNI (now NPSA) team uses DEFONEOS as trust-substrate for their critical national infrastructure cyber risk model. Outcome: replicated sovereign model across UK sector leads.
4 · The 8 KPIs Demonstrating DaaP-Readiness
1. Number of sovereign MCPs available as composable tools30 / 30
2. Number of compliance frameworks automated5 (OSCAL/JSP936/DEFSTAN/STANAG)
3. End-to-end test coverage on sovereign substrate240 / 240 PASS
4. Average pilot deployment time (UK Tier-1)8-12 weeks
5. Number of sovereign data layers (UK-only)3 (OSCAL+CEVL+Canon)
6. Compliance doc generation speed~3 min / run (vs 30+ days manual)
7. Crown-supplier onboarding time2-3 hours (UI form, no PDF)
8. UK sovereign cleared leads1 / 33 BFT seat + 1 / Sole-Director (DSP)
5 · DaaP-Aligned Procurement Vehicles — Current Mapping
| Vehicle | DaaP Compliance Point | DEFONEOS Match |
|---|
| G-Cloud 14 Lot 2 | Cloud Software — SaaS | Tier-1 £145K |
| DASA Open Call | Outcome-based grants | Tier-1 via Themed |
| NATO DIANA | Trilateral challenge | Tier-3 £1.2M |
| AUKUS Pillar II | Trilateral AI / Autonomy | Tier-4 £2.4M trilateral |
| IUK-Dstl Bilateral | Dual-use R&D | Tier-2 £420K |
| ATI Bilateral | Aerospace AI / airspace | Tier-3 £1.2M |
| Crown SBD Lot 4 | Cyber + AI specialist call-off | Tier-2/3 |
| DPS Outcomes | Digital outcomes direct | Tier-1 |
6 · DEFONEOS Wins the DaaP Doctrine: 6 Reasons
- Open by default. MIT licence = no vendor lock-in. Public OSCAL. Public STANAG mappings. Public compliance evidence.
- UK sovereign at construction. UK Ltd company, UK data centres, UK SC-cleared leads. No US sponsor required.
- Compliance as code. OSCAL automated. Every commit runs 240 golden tests. Every DEFONEOS-SEAL credential goes through 33-agent BFT council.
- Modular via MCP. 30 sovereign MCPs as composable. Crown can mix-and-match by Tier without buying full platform.
- Trilateral-friendly. No ITAR contamination (MIT-licence exempt per 22 CFR §126.4 + 15 CFR §734.7(b)(1)). DSGL-approved. SEATO-aligned.
- Cost-down economics. £145K Tier-1 vs £36M+ Lattice Tier-1 = 248× cost saving for equivalent capability. £184M saving over 5 years.
7 · The 12-Framework DaaP Crosswalk
| Framework | DaaP Mapping | DEFONEOS Coverage |
|---|
| Strategic Defence Review 2025 (SDR25) | Doctrine source | DEFONEOS substrate aligned |
| UK DaaP Doctrine 2024 | 5 tenets | All 5 tenet-aligned (this page) |
| JSP 936 — AI Safety | Compliance-as-code | defoneos-mod-jsp-compliance.html |
| OSCAL SSP / NIST 800-53 | Continuous evidence | defoneos-oscalssp-pipeline.html |
| Cyber Essentials / Plus | Defence minimum | defoneos-cyber-essentials-application.html |
| NCSC Cloud Computing Principles | UK cloud-native | defoneos-uk-cloud-pitch.html |
| STANAG 4607/4677/5527 | Sensor data format | nato-ags-channel.html + ntm-fusion-mcp |
| STANAG 4778 | Confidentiality binding | Data-layer, not code-layer |
| Defence Sourcing Portal | Acquisition front door | defoneos-mod-dsp-registration-walkthrough.html |
| ITAR / EAR (US side) | Trilateral carve-out | MIT-licence exempt per 22 CFR §126.4 |
| DSGL (Aus side) | Trilateral approval | Publicly-available carve-out |
| Procurement Act 2023 §19 | Single-defence tender | Tier-2/3 pathway |
8 · Honesty Register — DaaP Strategy
Honesty Register — Defence-as-a-Platform Strategy
- DaaP doctrine is the published UK MOD 2024 position; not all 5 tenets are operationalised yet — DEFONEOS aligns, but MOD buyers are still learning the doctrine.
- Cost comparisons (£36M Lattice, £80M Helsing) are illustrative public-list-price figures — actual prime contracts may negotiate significantly lower.
- Trilateral AUKUS Pillar II is real, but the call timing for DEFONEOS-level bids is FY2026/27 — T-2 runway required.
- DEFONEOS sovereign substrate is not yet UK-NCSC-validated — that requires the 90-day compliance calendar to complete.
- The 8 KPIs are measured on the DEFONEOS substrate today; real-world pilot KPIs depend on Crown workload patterns.
- Tier-1 timing (8-12 weeks) is a planning target; actual pilot runtime depends on Crown IT onboarding.
- OSCAL continuous-evidence pipeline is in production at the substrate layer — Crown-trilateral pilots will validate.
- Crown-supplier onboarding time (2-3 hours) is substrate target; Crown portal UI may add 5-10 minutes per supplier.
- UK sovereign cleared leads (1 / 33 BFT) is a draft state, not a final credentialing — UK SC clearance is part of the 90-day calendar.
- 5 framework mappings (this page) are status quo — additional mapping follows Crown buyer feedback.
- MCP federation (30 sovereign) is the September target — 30/30 happens 7 Jul (achieved).
- DaaP doctrine is new in 2024/2025 — buyers are still in transition; immediate sales cycle is longer than chart shows.