DEFONEOS Pilot — Statement of Work

SOW-DEF-001 · v1.0 · 2026-07-13 · 8 weeks · £95,000 fixed-price · SIGIL-anchored

This is the owner-executable SOW that turns the 1-page pilot proposal into a binding contract. Every deliverable is SIGIL-signed. Every acceptance criterion is byte-measured. Every workstream has a named owner. Total: 4 workstreams · 8 weeks · 23 deliverables · 7 KPIs · £95,000 fixed-price.

1. Parties

Party	Role	Entity
Buyer	Contracting authority	[BUYER NAME] — UK government department / agency / prime
Supplier	Prime contractor	CSOAI Ltd · UK Company 16939677 · Companies House active · VAT GB 469 088 731
Authority contact	Contract owner	[NAMED SRO / Programme Lead]
Supplier lead	Delivery owner	Nicholas Templeman · Director, CSOAI Ltd · sole signatory
33-agent BFT council	Independent oversight	33 sovereign agents · quorum 23/33 · 25-7-1 standing rule

2. Period of performance

Phase	Weeks	Dates (from contract award +5 BD)	Milestone
Mobilisation	W1	Day 1-5	Kickoff · access provisioned · sub-stream leads named
Discovery	W2-W3	Day 6-15	As-is baseline · 30-day measurement window opens
Build	W4-W6	Day 16-35	4 workstreams deliver · weekly SIGIL receipts
Acceptance	W7	Day 36-40	Buyer walkthrough · acceptance test · SIGIL evidence pack
Closure	W8	Day 41-45	30-day measurement window closes · pilot report · 3 renewal paths offered

Total elapsed: 45 working days from contract award. Buyer has 5 BD acceptance period. SIGIL-anchored evidence pack delivered end-W7.

3. Workstreams & Deliverables

Workstream A — Sovereign substrate deployment

#	Deliverable	Acceptance criterion	Owner	Week
A1	DEFONEOS air-gap stack deployed to buyer enclave	30 MCPs active · 5 SIGIL receipts / hour	CSOAI lead	W1
A2	33-agent BFT council instantiated	Quorum 23/33 verifiable · 25-7-1 rule	CSOAI lead	W2
A3	SoV3 sovereign runtime	Self-custody keys · no external API dependency	CSOAI lead	W2
A4	Cyber Essentials Plus evidence	IASME letter on file · 100% pass	CSOAI lead	W1
A5	Air-gap hardening report	NCC group letter or equivalent	3rd party	W6

Workstream B — Sensor integration (10 of 30 MCPs)

#	Deliverable	Acceptance criterion	Owner	Week
B1	Sentinel Hub satellite ingest	10m resolution · UK-wide · daily refresh	CSOAI lead	W3
B2	Ordnance Survey OS OpenData	MasterMap + terrain · UK-wide	CSOAI lead	W3
B3	Companies House + ONS statistics	Real-time entity + demographic feeds	CSOAI lead	W4
B4	GDELT news + OpenAQ air quality	Real-time OSINT + environmental	CSOAI lead	W4
B5	AISStream maritime + MQTT bridge	UK EEZ vessel tracking · IoT ingest	CSOAI lead	W5
B6	RTSP camera + 4 sensor MCPs (compliance pick)	Buyer-priority domains covered	CSOAI lead	W5

Workstream C — Digital Twin + ISR

#	Deliverable	Acceptance criterion	Owner	Week
C1	Cesium 3D globe (Yorkshire pilot)	1.2M building heights · 30cm imagery · live	CSOAI lead	W4
C2	YOLOv8 ISR pipeline	Person/vehicle/anomaly · >85% mAP	CSOAI lead	W5
C3	OpenAthena geolocation	<5m CEP on sample dataset	CSOAI lead	W5
C4	Mava swarm demo (4-drone sim)	Coordinated ISR task · 60s live	CSOAI lead	W6
C5	FreeTAKServer C2 endpoint	Cursor-on-target · TAK Protocol v1	CSOAI lead	W6

Workstream D — Compliance + audit

#	Deliverable	Acceptance criterion	Owner	Week
D1	JSP 936 v0.1 compliance generator	Buyer-named use case · auto-evidence pack	CSOAI lead	W5
D2	OWASP ASI attestation	12 controls · letter on file	3rd party	W6
D3	ISO/IEC 42001 gap-analysis report	Roadmap to certification	3rd party	W6
D4	DEFONEOS-SEAL mock issuance	BFT 33-agent vote · SIGIL receipt	CSOAI lead	W7
D5	SIGIL-anchored pilot evidence pack	Hash-stamped · verifiable · timestamped	CSOAI lead	W7
D6	30-day measurement report	7 KPIs · before/after · SIGIL-anchored	CSOAI lead	W8

4. KPIs (7 named, byte-measured)

30MCPs active · air-gapped

23/33BFT quorum · observable

≤ 100msSIGIL verification latency

0external API dependencies

>85%ISR mAP on buyer dataset

100%UK data residency

3renewal paths offered · no-fault exit

5. Budget breakdown (£95,000 fixed-price)

Line	Item	Days	Day-rate	Total
1	CSOAI lead — mobilisation, deployment, BFT council	15	£1,400	£21,000
2	CSOAI lead — sensor integration (W3-W5)	15	£1,400	£21,000
3	CSOAI lead — Digital Twin + ISR build (W4-W6)	15	£1,400	£21,000
4	CSOAI lead — compliance + audit (W5-W7)	10	£1,400	£14,000
5	3rd-party hardening letter (NCC or equivalent)	—	—	£6,500
6	3rd-party OWASP ASI attestation	—	—	£5,500
7	3rd-party ISO 42001 gap-analysis	—	—	£4,000
8	SIGIL infrastructure (compute + storage + CDN)	—	—	£1,500
9	Contingency (binding-cap)	—	—	£500
TOTAL FIXED-PRICE				£95,000

No T&M. No over-runs. £500 contingency is the binding cap. CSOAI absorbs all over-run risk.

6. Acceptance procedure

W7: CSOAI delivers SIGIL-anchored evidence pack with hash-stamped artefacts (A1-D5).
W7+5 BD: Buyer walks through evidence pack · raises any queries within 5 BD.
W7+10 BD: Acceptance test on buyer's dataset · both parties sign acceptance certificate (SIGIL-anchored).
W8: 30-day measurement report delivered · pilot closes · invoice raised · 30-day payment terms.
Post-W8: 3 renewal paths offered · no-fault exit · 90-day data-return + deletion certificate.

7. Governance

Cadence	Forum	Attendees	Outputs
Daily 09:00	Stand-up (15 min)	CSOAI lead · buyer SRO	Blockers · today's plan
Weekly Friday	Steering review (60 min)	CSOAI · buyer SRO · buyer technical lead	SIGIL receipts · risk register · next-week plan
W4 milestone	Mid-pilot review (90 min)	+ CSOAI Director · buyer programme head	Go/no-go on W5-W7
W7 acceptance	Buyer walkthrough	All above · buyer end-users (≤5)	Acceptance certificate
W8 closure	Pilot report review	CSOAI Director · buyer SRO	3 renewal paths · no-fault exit option

8. Risk register

#	Risk	Likelihood	Impact	Mitigation
R1	Buyer enclave access delayed >5 BD	M	H	W1 escalates to SRO · W2 still delivers in CSOAI cloud · air-gap migration in W6
R2	3rd-party hardening letter delayed	M	M	CSOAI self-attests W6 · 3rd-party letter added when received (no extra cost)
R3	YOLOv8 mAP <85% on buyer dataset	L	M	Fine-tuning window in W5 · if still <85%, KPI scope-removed with credit note
R4	BFT council cannot reach quorum	L	H	Fallback: 7-agent minimum · SIGIL receipts still issued · formal vote at W8
R5	Buyer SC-cleared personnel unavailable	L	H	CSOAI lead already SC-clearable (application pending) · pre-pilot briefing pack unclassified

9. Termination & no-fault exit

By buyer (no-fault): 7-day notice · pay for work delivered + 10% wind-down · all buyer data returned + deletion certificate within 30 days.
By supplier (no-fault): 14-day notice · deliver all work-in-progress · all SIGIL receipts handed over · pro-rated refund for incomplete workstreams.
For cause: Material breach uncured within 14 days · standard contract terms.
Force majeure: 30-day pause · resumption or termination at buyer's option.

10. Renewal paths (post-W8)

Path	Description	Annual value	Term
A — Enterprise licence	Per-seat · all 30 MCPs · sovereign cloud · BFT council	£240k-£420k	3 years
B — Outcome-based	Per-deal · KPI-linked · 5% saving shared with buyer	£180k-£360k	2 years + extension
C — Defence-prime sub-contract	White-label for prime · sovereign guarantee preserved	£300k-£800k	5 years

Buyer chooses 0, 1, 2, or 3. No pressure. 90-day data-return + deletion certificate on any path that ends.

11. SIGIL chain (every artefact is verifiable)

Each of the 23 deliverables ships with a SHA-256 hash, an Ed25519 signature, and a SIGIL receipt that the buyer can verify in <100ms via /api/verify?sigil=<id>. The 30-day measurement report aggregates 5 SIGILs / hour × 45 days = 5,400 receipts. If the buyer disputes any deliverable, the SIGIL chain is the evidence.

12. Schedule of signatures

Signature	Name	Role	Date
For Buyer	[NAMED SRO]	Senior Responsible Owner	__________
For Supplier	Nicholas Templeman	Director, CSOAI Ltd (UK 16939677)	__________
Counter-signature (witness)	[33-agent BFT council chair]	Sovereign oversight witness	__________