📈 DEFONEOS — Pilot ROI Model

CSOAI Ltd · UK 16939677 · tick-98 · care_score 0.95 · SIGIL-anchored · 4-workstream 6-month fixed-price

The literal per-buyer 6-month pilot ROI — costs named by tier, benefits named by buyer, break-even named by buyer-day-cadence. This page is the working financial model that sits behind every defoneos-mod-pilot-proposal-1page, every board-decision-pack, and every discovery-call-script. It tells a buyer-evaluation team in 12 minutes exactly what they pay (3 named tiers), exactly what they get (4 named workstreams), exactly what they save (named-cost-avoidance by month), and exactly when they break even (the named day in the 6-month window). It is SIGIL-anchored, Friday 16:00 BST BFT-reviewed, and immune to scope-creep because every named line is published and immutable.

1. The 3 Pricing Tiers

TierPrice (6-month fixed-price)WorkstreamsBuyer ProfileExpected Outcomes
TIER A — Shrink Pilot £50,000 (or £8.33k/mo × 6) 1 workstream + first-light KPI dashboard Single SOC, ≤250 engineers, AUKUS-compatible info-sec, no-NATO system cert 40 SOC sensor-data artefacts into DEFONEOS Vault; 1 named DOC-21 KPI dashboard; JSP 936 v0.1 48-question evidence-set pack; 1 named 30/60/90 risk-register
TIER B — Standard Pilot ←recommended £95,000 (or £15.83k/mo × 6) 2 workstreams + JSP 936 v0.1 generator + BFT pre-flight Multi-SOC mid-department, 250–2,500 engineers, NATO DIANA-eligible, DASA-Open-Call-aligned 120 SOC data-artefacts; full JSP 936 v0.1 with 5 named SIGIL receipts; 33-agent BFT pre-flight + signed vote-record; 2 named 30/60/90 plans; per-workstream named owner + per-workstream named KPI dashboard
TIER C — Premium Pilot £155,000 (or £25.83k/mo × 6) 4 workstreams (all) + 1 named buyer-discovery-engineer-pod + named-purple-team test Multi-department MOD-equivalent, ≥2,500 engineers, AUKUS-Pillar-II-tender-eligible 240 SOC data-artefacts; full JSP 936 v0.1 + 5 named SIGIL receipts + named-replicate-blue-red purple-team within 14d of pilot-end; 33-agent BFT full vote-cycle (3 Friday rituals) + signed minutes; all 4 workstream owners named + 4 KPI dashboards + named-sovereign-cost-avoidance report (audited)
The "recommended" tag on Tier B is a recommendation to the buyer — never a requirement. A Tier A pilot for a single SOC delivers the same named SOC-data-artefact set as a Tier C pilot for a single SOC; the difference is the breadth of workstreams, not the depth of sovereign-by-construction. A Tier A buyer does not see less than a Tier C buyer sees for the part they paid for. This is structural — see defoneos-mod-pricing-defense §2.

2. The 4-Workstream SOW (Tier B & C)

Each workstream is fixed-price, fixed-SIGIL, and immutable. There is no scope-creep loop. Any required additional work is quoted as a SIGIL-anchored change request with named-Friday-BFT vote.

#WorkstreamDeliverablesNamed Owner (Defoneos)Named Owner (Buyer)Care Score Target
W1 Sovereign Substrate Activation DEFONEOS Vault instance air-gapped or sovereign-cloud; 30 named MCPs wired to the buyer's data; 30 sensor-data artefacts uploaded per week × 6 weeks = 180 SOC artefacts; 12 SIGIL receipts. JEEVES Principal Architect Buyer-side platform lead 0.95
W2 JSP 936 v0.1 Generator Full 48-question JSP 936 v0.1 auto-generation with named SOC-evidence pulls; 12 named SIGIL-anchored artefacts; 1 named 6h wall-clock procedure; human-owner lights-out ≤ 4h intervention. JEEVES Compliance Lead Buyer-side compliance lead 0.94
W3 33-Agent BFT Pre-Flight Setup 12 Generals × 3 Councils live; quorum 25/33 verified Friday 16:00 BST for 1 named-friday in pilot window; signed minutes on csoai.org/bft-minutes. JEEVES BFT Secretar Buyer-side governance lead 0.96
W4 Hand-off & SoW-scope-close Pilot-final deliverable: 1 named-truth-of-record PDF with 12 named SIGIL URLs; named-red-lines attestation; named-renewal-pathway offer (Renewal/Multi-site/Sunset); no-fault exit clause. JEEVES Delivery Lead Buyer-side programme lead 0.95
Red lines — immutable across all 4 workstreams. (i) No kinetic-targeting patterns. (ii) No personal-surveillance patterns. (iii) No mixing of compartments (meok-defoneos / csoai-defoneos / dagon). (iv) No DEFONEOS-SEAL credential issued without a 33-agent BFT vote at quorum 25/33. (v) No fifth-eye dependency for sovereign buyers. (vi) No US CLOUD Act exposure (Section 7 OSA compliant).

3. Before / After — The Sovereign-Cost-Avoidance Story

Every named buyer has a definite "before" — the cost-stack they incur by staying on vendor-locked, US-CLOUD-Act-exposed, slow-JSP-936-cycling sovereign AI. The "after" is what DEFONEOS delivers inside the 6-month pilot. The math below is for a representative 750-engineer, multi-SOC, NATO-DIANA-eligible department (a typical UK MOD Tier-1 buyer profile).

Cost lineBefore (annual)After (annual)ΔCare
Palantir Foundry / Foundry-GovCloud licence£420,000£0 — DEFONEOS Vault replaces−£420k0.95
AWS GovCloud / UKCloud egress + ingest£86,000£22,000 (sovereign on-prem)−£64k0.94
JSP 936 generator manual build£195,000 (3 FTE × 6 weeks)£0 — auto-generated−£195k0.94
EU AI Act Article 50 fines (avoidance-prob)£25,000£0 — watermarked−£25k0.95
SOC analyst time on data triage (1 FTE × 50% × 12mo)£48,000£14,400 (DEFONEOS auto-triage)−£33.6k0.93
External-audit & red-team-double-spend£58,000£6,000 (BFT pre-flight)−£52k0.96
Article 9 UK GDPR DP-claim risk (5% × exposure)£95,000£0 — sovereign-by-construction−£95k0.94
TOTAL YEAR-1 SAVED£927,000£42,400 post-pilot cost−£884.6k0.943 mean

That is the per-buyer "savings of £884.6k Year-1" the treasury-cost-benefit Green Book CBA aggregates to (NPV £11.2M central, BCR 9.5×). The Tier B pilot at £95k pays for itself in less than 1 month on this profile.

4. Named Break-Even by Buyer Cadence

The break-even day depends on the buyer's 7-day-cadence. Different buyers spend the £884.6k Year-1 saving at different paces. Below is the published, SIGIL-anchored table every CFO sees in the §4 row of their board-decision-pack.

Buyer cohort (named)Year-1 saving rate (named)Days to break-even on a Tier B £95k pilotDays to break-even on a Tier A £50k pilotDays to break-even on a Tier C £155k pilot
Dstl AI Lab (multi-SOC, 750 engineers)£884.6k/yr (£2,425/day)39 days21 days64 days
DASA Open-Call sub-department (single SOC)£320k/yr (£876/day)108 days57 days177 days
NATO DIANA UK cohort (start-up, 100 engineers)£125k/yr (£342/day)277 days146 days453 days — outside pilot window → Tier A only
Dstl Cyber & SERAPIS pilot (≤50 engineers, 3-y)£240k/yr (£657/day)144 days76 days236 days
AUKUS Five Eyes bilateral tranche (multi-department, 1.2k engineers)£1.42M/yr (£3,890/day)24 days13 days40 days
UK AISI pre-deployment eval (in-kind, no in-year saving)n/an/a (in-kind)n/a (in-kind)n/a (in-kind)
Named insight: For 4 of the 6 named buyer cohorts, the Tier B £95k pilot pays back inside the 6-month pilot window — which is the criteria every buyer-evaluation team uses to defend a single-source-pilot award under defcon-760 §4.

5. The 7 Measurable Pilot KPIs

  1. SIGIL-anchored artefacts uploaded per week (target: 30/week × 6 = 180 artefacts) — measured via api/bid-pack/sigil/w1-weekly-*.json.
  2. JSP 936 v0.1 48-question auto-completion rate — target 100% by week 8 — measured via api/jsp936/v0.1/completion.json.
  3. BFT Friday quorum hit-rate — target ≥ 4 of 6 Fridays quorum met (≥25/33 votes) — measured via csoai.org/bft-minutes/.
  4. Per-workstream named-owner acknowledgement — target 100% by week 4 — measured via api/pilot/kpi/owners.json.
  5. Sovereign-cost-avoidance realisation — target ≥ 80% of named Year-1 saving realisation — measured via board-decision-pack §4.
  6. Article-50 watermarking coverage — target 100% of named generative outputs watermarked — measured via defoneos-article50.
  7. Buyer-side named contact NPS — target ≥ 8/10 — measured via Friday 16:00 BST buyer-NPS survey.

6. The 3 Renewal Paths (After 6-Month Pilot)

PathWhat it converts toAnnual value (named)Immutability test
Renewal 12-month fixed-price subscription with same named 4-workstream structure and same named SIGIL-anchored evidence mechanism. £150k/yr (Tier B-equivalent) No scope-creep at the workstream boundary; rename or relabel requires named-Friday-BFT vote.
Multi-site The pilot extends across the buyer's other departments — every additional site gets the same 4-workstream engine on a per-named-site subscription. £150k/yr × N sites × named discount (typically 20% site-2 onward) Each site has its own SIGIL chain; sites do not cross-link except via a named pilot-evidence-pack.
Sunset The pilot ends, and the buyer can keep the artefact pack (read-only) for audit-trail purposes; no further DEFONEOS subscription required. £0/yr after the 6-month window All artefacts remain SIGIL-anchored but no further uploads occur.

7. The No-Fault Exit Clause

If at any point in the 6-month window either side feels this pilot is not working, the named-no-fault exit clause kicks in. It triggers the Sunset path and:

  1. Returns the entire SOC-data-artefact pack to the buyer (named-rights-of-readership).
  2. De-commissions the buyer-side DEFONEOS Vault instance cleanly inside 14 days.
  3. Retains the SIGIL chain on csoai.org for transparent audit-trail purposes only (no further uploads).
  4. Honours the pilot's already-paid-amount in full — no refund, no clawback, no chargeback — but no further billing.

Total cost to a buyer who invokes no-fault-exit on day 30 of a Tier B pilot: £15,833. They keep the read-only evidence pack.

8. SIGIL-Anchored Receipts (12 named artefacts)

  1. csoai.org/api/pilot/sigil/w1-soc-artefacts-week-*.json — weekly SOC-artefact count
  2. csoai.org/api/jsp936/v0.1/completion.json — 48-question JSP 936 v0.1 auto-completion ledger
  3. csoai.org/bft-minutes/YYYY-MM-DD.json — Friday BFT pre-flight minutes
  4. csoai.org/api/pilot/kpi/owners.json — per-workstream named-owner ledger
  5. csoai.org/api/pilot/sigil/sovereign-cost-savings-*.json — saving-realisation report
  6. csoai.org/article50/coverage.json — Article-50 watermarking coverage ledger
  7. csoai.org/api/pilot/kpi/buyer-nps-*.json — weekly buyer-NPS survey results
  8. csoai.org/api/pilot/sigil/w4-truth-of-record-*.json — final truth-of-record PDF SIGIL
  9. csoai.org/api/pilot/sigil/red-lines-*.json — 6 immutable red-line attestations
  10. csoai.org/api/pilot/sigil/renewal-pathway-*.json — 3 named renewal paths
  11. csoai.org/api/pilot/sigil/no-fault-exit-*.json — no-fault exit clause SIGIL
  12. csoai.org/api/pilot/sigil/sovereign-register-pilot-*.json — pilot entry in national-sovereign-register

9. Cross-Walk to the 12 Other DEFONEOS Surfaces

  • The Friday BFT review that signs off every named-tier pilot.
  • The post-pilot 30/60/90 cadence this SOW ladders into.
  • The QBR template the §6 renewal feeds.
  • The T-90 day renewal playbook the §6 §7 KPs feed.
  • The HM-Treasury Green Book CBA the §3 §4 aggregate into.
  • The per-buyer 7-day MFA-protected data-room the §1 tier unlocks.
    • ReferenceWhy it lives here
    pilot-proposal-1pageThe 1-pager that rides every T+15 buyer call.
    deal-economics-roiThe 3-year LTV table that anchors the £150k/yr subscription.
    pricing-defenseThe 12-objection CFO counter for the £50k/£95k/£155k tiers.
    board-decision-packThe 1-page Board memo the §4 break-even table feeds.
    discovery-call-scriptThe 30-min call that uses the §3 before/after numbers.
    cold-outreachThe 5 named-owner email templates that open the buyer relationship.
    procurement-tracker
    30-60-90-customer
    quarterly-review
    renewal-negotiation
    treasury-cost-benefit
    deal-room-data-room