EU AI Act Article 50 β€” 20 days to seal | Get passport

🀝 DEFONEOS Referral-Partner Letter

Three variants β€” UK Prime / UK Academic / UK Standards Body Β· 11 July 2026 Β· v1.0 Β· Personal, signed, not a marketing blast.

Why this exists

DEFONEOS wins MOD contracts by being cited inside other people's bids, not by winning them as prime. A referral partner is someone who already has the MOD relationship (the prime, the academic, the standards body) and who mentions us in their bid or evaluation. In return: they get a sovereign substrate they don't have to build, and we get a contract via their paper.

This page has 3 letters. Sign, scan, send. Or copy-paste into your own letterhead.


1. THE PRIME-DEFENCE VARIANT (BAE / QinetiQ / Leidos / Thales / Babcock / Atkins / CGI / Sopra Steria / Accenture Federal)

πŸ“§ Letterhead: MEOK Labs Ltd Β· UK 16939677 Β· Companies House public-record

Subject: DEFONEOS β€” sovereign substrate for your next MOD bid (no fee, no exclusivity, no name on your marquee)

Dear [FirstName],

We've not met β€” and this isn't a marketing email. I lead a small sovereign-AI
group (MEOK Labs Ltd / the csoai-defoneos.org project) and we have a
problem you can solve in 5 minutes of your time.

The problem:

    Your 2026-2028 MOD bids increasingly score against UK sovereign-substrate
    criteria (JSP 936, NIST AI RMF, ISO 42001, AUKUS algorithmic
    transparency). You're bidding these contracts, and you know the gap:
    you have the integration, you have the customer, you don't have the
    sovereign OS itself.

    Building one would take 18 months and Β£8M and would still not get a
    DEFONEOS-SEAL. You can't afford to build it. We can't afford for you
    to build it. So we built it β€” and we'd rather you cite it than
    compete with it.

What I'm asking for (5 minutes of your time):

    1. A 15-minute call with the capture lead on one of these in-flight bids:
        β€’ Dstl AI Assurance (DAIC) β€” Β£2.4M / 18 months
        β€’ Defence Innovation Unit (DIU AUKUS Talisman Sabre pathway)
        β€’ AUKUS AI & Autonomy Pillar programmes
        β€’ NATO DIANA Phase II cohort (€100k-€1M per challenge)
        β€’ RAF Rapid Capabilities Office β€” automation pipeline

    2. If your team's solution would benefit from a sovereign substrate,
       we can put a sub-contract in place in 14 days β€” sub-contract fee
       capped at 8% of our Β£180k Platform price = Β£14,400 paid annually.
       You keep the rest. We sit under you; we don't bid against you.

    3. We can issue a DEFONEOS-SEAL on your bid in 7 days (BFT-council
       vote will take longer for full accreditation but a provisional seal
       is allowed under the seal-v1.0 policy).

What we will NOT ask:

    β€’ We will not ask to be on the marquee / primary contractor page.
    β€’ We will not ask to set your pricing.
    β€’ We will not ask for exclusivity β€” you can cite us in many bids.
    β€’ We will not write your solution narrative.

What we have right now (the verifiable evidence):

    β€’ 30 sovereign MCP servers, all open-source (Apache 2.0)
      github.com/csoai/defoneos-mcp + 29 sister repos
    β€’ 240-test automated compliance suite (JSP 936, NIST AI RMF, ISO 42001)
      github.com/csoai/defoneos-compliance-tests
    β€’ OSCAL SSP generator (UK sovereign profile + AUKUS profile)
      github.com/csoai/defoneos-oscal
    β€’ 33-agent BFT defence council (Maternal-Covenant voting)
      Spec: defoneos-33-bft-council.html on our public site
    β€’ 50+ public DEFONEOS surfaces on csoai-defoneos.org
    β€’ Sovereign pricing card (single A4, attached) β€” flat Β£180k Platform,
      no per-seat, no per-call, no revenue-share, sovereign-GBP only

What we don't yet have (the honesty register):

    β€’ Not yet UK-prime-revenue. Pre-traction. This letter is the effort
      to change that.
    β€’ Cyber Essentials Plus in application (ETA Q3 2026).
    β€’ SC clearance in application (ETA Q4 2026).
    β€’ DEFONEOS-SEAL not yet UKAS-accredited.

If the timing is bad, please reply "not now" and I'll come back in 90 days.
If the timing is right, I'll send a Calendly link in my reply.

With respect,

Nicholas Templeman
Sole trader, MEOK Labs Ltd (UK 16939677)
nicholas@csoai.org Β· https://csoai-defoneos.org
+44 (0)7XXX-XXXXXX

β€” attachments β€”
  1. DEFONEOS pricing card (1 page, PDF)
  2. DEFONEOS technical brief (8 pages, PDF)
  3. OSCAL SSP sample (UK sovereign profile, PDF)
β€” cc: partnerships@csoai.org (in case of out-of-office) β€”

Who among the primes gets this

TierOrgWhy themCapture lead to find
T1ABAE Systems (Digital)Largest prime; AUKUS-aligned.Head of Digital Engineering, AI Lead
T1AQinetiQMOD's test & evaluation partnerHead of AI / Autonomy
T1AThales UKSovereign systems, AUKUS Pillar 2UK Head of AI & Autonomy
T1BLeidos UKC5ISR, AUKUS-alignedUK Country Lead
T1BBabcock InternationalNaval marine & sovereign infraHead of Technology
T2AtkinsRΓ©alisCritical national infrastructure AIHead of Defence AI
T2Sopra SteriaMOD digital services incumbentDefence Account Director
T2CGI UKMOD digital partner, sovereign-cloudUK Defence Lead
T3Accenture Federal UKMOD OSCT capabilityUK Public Sector Defence Lead
T3Deloitte / PwC / KPMGAdvisory to MOD CIO / Defence DigitalDefence Advisory Partner

Send-time tactic

πŸ“… When + how


2. THE UK-ACADEMIC VARIANT (universities with defence research)

πŸ“§ Letterhead: MEOK Labs Ltd Β· academic collaboration, not a sale

Subject: DEFONEOS β€” open-source substrate for your next UKRI / DSTL / RAF-Navy grant bid

Dear Professor [LastName],

I've been reading your group's published work on [specific paper, e.g.
"verification of autonomous systems under JSP 936"] and I want to
propose something that takes you 5 minutes to evaluate.

The proposal:

    DEFONEOS is an open-source sovereign-substrate OS released under
    Apache 2.0 (github.com/csoai). 30 sovereign MCPs, 240-test compliance
    suite, OSCAL SSP generator, 33-agent BFT defence layer β€” all open,
    all UK-sovereign, all AUKUS-compatible.

    I would like your research group to be among the first 5 UK-academic
    citing-FORTHs on the substrate. In return:

    1. We co-author one paper per year on sovereign-AI verification
       (you choose the venue β€” ICLR / NeurIPS / AISafety / FM).
    2. Your PhD students get free sovereign-AI compute (we provision a
       Mac Studio M4 Ultra pod in your lab via 8k Sovereign Inference
       Pod add-on, donated).
    3. We cite your group's relevant work in our DEFONEOS technical
       brief (you get visibility on the public register).
    4. We co-PI with you on the next UKRI / DSTL / RAF-Navy grant call
       that touches sovereign AI / OOD robust autonomy / human-OODA
       automation.

What we want from you (5 minutes):

    1. A 30-minute call (in person if you're near Leeds/York; Zoom
       otherwise).
    2. Permission to add you to the DEFONEOS academic advisory panel
       (5 named academics across 5 UK universities, 2 hours/year
       commitment, honorarium Β£5k/yr per academic via SEAL revenue).

If this isn't right, please say so. There's a queue of 12 UK research
groups I'd like to invite; I'd rather know now than in 90 days.

What we are NOT:

    β€’ We are not a "vendor" (the substrate is open-source).
    β€’ We are not a training company (we don't sell courses).
    β€’ We are not a consultancy (we sub-contract under primes).
    β€’ We are not a hyperscaler (no AWS / Azure / GCP dependency).

What we ARE:

    β€’ A sovereign AI OS project under MEOK Labs Ltd.
    β€’ 30 MCPs, 240 tests, 33-agent BFT, open-source.
    β€’ Aiming for first MOD contract by Q4 2026.
    β€’ Looking for the 5 UK academic groups who want a sovereign
      home for OOD-robust / human-OODA / autonomy-verification work.

Honesty register:

    β€’ Pre-traction (no MOD contract yet).
    β€’ Sole-trader. If your grants require a university-PI, I'll
      sign as Co-PI; you keep PI.
    β€’ Open-source Apache 2.0 (your code stays yours; you cite
      ours; we cite yours).

If timing is bad: please reply "not now" and I'll come back in 90 days.

With respect,

Nicholas Templeman
Sole trader, MEOK Labs Ltd (UK 16939677)
nicholas@csoai.org Β· https://csoai-defoneos.org
+44 (0)7XXX-XXXXXX

β€” attachments β€”
  1. DEFONEOS technical brief (8 pages, PDF)
  2. Open-source Apache 2.0 LICENSE
  3. Sovereign inference pod spec (academic donation)
β€” cc: partnerships@csoai.org β€”

Target UK universities (defence-aligned AI/CS research)

UniversityGroupWhy them
OxfordOII / Robotics / CSAUKUS AI Pillar pathway, Human-OODA
CambridgeComputer Lab / CRASSHAI safety, robustness, formal verification
ImperialDyson School / DCSAutonomy, swarm, robotics
EdinburghInformatics / BayesBayesian AI, formal methods
UCLSPE / DeepMindSafe autonomy, RL robustness
ManchesterCS / RoboticsOOD robustness, autonomous systems
BristolBRL / CSBristol Robotics Lab, swarm
SouthamptonECS / SouthamptonAgents, autonomy, maritime
SheffieldACSE / CSAutonomy, ML verification
LeedsCS / RoboticsLocal β€” Nick's home base
YorkCS / AILocal β€” Nick's home base
Queen's BelfastECIT / CSNI defence-aligned CS, sovereign

First-priority 5 universities: Bristol (closest to defence-autonomy muscle), Oxford (AUKUS-aligned), Edinburgh (formal methods), UCL (AI safety), Leeds (local + naming-credibility for DEFONEOS-Yorkshire hub).


3. THE UK-STANDARDS-BODY VARIANT (BSI / NCSC / UK AISI / ICO / Reg/EU AI Act liaison)

πŸ“§ Letterhead: MEOK Labs Ltd Β· cross-walk proposal

Subject: DEFONEOS β€” offering the UK a sovereign-by-construction AI-OS cross-walk template

Dear [FirstName],

I'm writing because I think DEFONEOS can save BSI / NCSC / ICO /
UK AISI tens of thousands of cross-walk hours, and I'd like to
propose a 30-minute meeting to explore it.

The proposal:

    DEFONEOS includes a sovereign-by-construction compliance engine
    that automatically generates a signed OSCAL SSP mapped to:
      β€’ JSP 936 (MOD)
      β€’ NIST AI RMF (US, AUKUS-compatible)
      β€’ ISO/IEC 42001 (international)
      β€’ EU AI Act (Article 50 high-risk)
      β€’ UK AISI evaluation framework (system-card)
      β€’ Cyber Essentials Plus (UK gov baseline)
      β€’ SOC 2 type-ready (commercial baseline)

    This is one OS, one signed PDF, 240 automated tests, runnable
    in a UK-sovereign enclave (M2/M3/M4/Mac Studio mesh).

    We propose that DEFONEOS be offered, on a no-fee no-royalty
    basis, to your members / regulated-entities as a free
    cross-walk template. Specifically:

      1. BSI: we offer to register DEFONEOS as a UK AISC-style
         "implementable sovereign-substrate profile" for ISO 42001.
      2. NCSC: we offer to whitelist DEFONEOS under the NCSC
         Cloud-Computing Principles guidance (cyber-sovereign pattern).
      3. ICO: we offer to register DEFONEOS as a DPIA-template
         generator under UK GDPR.
      4. UK AISI: we offer to submit a System-Card for evaluation
         (already drafted β€” defoneos-system-card.html).
      5. Reg/EU AI Act: we offer DEFONEOS as the underlying
         "post-market-monitoring" substrate for any UK sovereign-
         provider wanting Article 50 high-risk compliance.

What this saves:

    Each of your members / regulated-entities currently pays
    Β£40k-Β£120k per AI-system-deployment to consultants for cross-walks.
    If 100 UK regulated-entities adopt the DEFONEOS cross-walk template,
    that's Β£4M-Β£12M in cross-walk cost avoided across UK Plc per year.

What I'm asking (30 minutes of your time):

    1. A 30-minute call to evaluate DEFONEOS as a no-fee template
       for your members.
    2. If favourable, a formal letter from your body endorsing the
       template (no fee changes on your side; no commercial
       commitment; we don't ask to be a "preferred supplier").
    3. A named contact at your body for our quarterly sovereign-AI
       cross-walk review (we host it; you attend if you wish).

Honesty register (the things I won't pretend):

    1. DEFONEOS is a commercial product (Β£180k Platform / Β£60k
       Deployment / Β£12k SEAL). The no-fee template is offered
       on top. We make money on Platform + Deployment, not on
       the template.
    2. DEFONEOS is not yet UKAS-accredited. We are pursuing
       accreditation through the SC-clearance workstream by Q4 2026.
    3. DEFONEOS-SEAL is not yet a "regulated credential" in any
       jurisdiction. It is an industry self-credential.
    4. We are a sole-trader. If your organisation prefers to
       engage a UK-prime sub-contractor, we sub-contract under
       them (BAE / QinetiQ / Atkins / etc. β€” all on the prime-letter
       list in Β§1).

If not now, please reply "not now" and I'll come back in 90 days.

With respect,

Nicholas Templeman
Sole trader, MEOK Labs Ltd (UK 16939677)
nicholas@csoai.org Β· https://csoai-defoneos.org
+44 (0)7XXX-XXXXXX

β€” attachments β€”
  1. DEFONEOS technical brief (8 pages, PDF)
  2. OSCAL SSP cross-walk sample (UK sovereign profile, PDF)
  3. UK AISI System-Card (draft, 12 pages, PDF)
  4. Apache 2.0 LICENSE
β€” cc: partnerships@csoai.org β€”

Target standards bodies

BodyWhy themBest entry point
BSI (British Standards)ISO 42001 national-body mirrorBSI AI Standards Lead
NCSC (National Cyber Security Centre)Cloud-Computing Principles, CCP-patternNCSC AI / Cloud Policy Team
UK AISI (AI Safety Institute)System-Card evaluation, pre-deploymentAISI Evaluation Team
ICO (Information Commissioner's Office)UK GDPR DPIA templateICO AI Sandbox Lead
DSRB (Defence and Security Reference Body)MOD accreditation pathwayDSRB Secretariat
NATO STOAllied interoperabilityNATO STO AI Panel Chair
ISO/IEC JTC 1/SC 42International AI standards (mirror)BSI national-body channel

4. THE ONE-PAGE OPENER (universal 100-word version)

πŸ“ Use as LinkedIn DM / Twitter reply / conference handout opener

DEFONEOS β€” open-source sovereign-substrate OS for the UK public-services
and AUKUS allies. 30 sovereign MCPs, 240-test automated compliance
suite (JSP 936 / NIST AI RMF / ISO 42001 / EU AI Act), OSCAL SSP
generator, 33-agent BFT defence layer. Apache 2.0. UK-sovereign.
AUKUS-compatible. Β£180k/yr Platform, sovereign-GBP only, no per-seat,
no per-call, no revenue-share. We are looking for: (a) primes who want
to cite us in their MOD bids; (b) academic groups who want a sovereign
home for autonomy-verification; (c) standards bodies who want a no-fee
cross-walk template for their members. Email nicholas@csoai.org to start.

5. THE 5 SENDING RULES (sovereignly enforced)

πŸ›‘ Hard rules for every referral-partner letter sent

  1. Personal, named individual β€” never alias@org. Find the person via LinkedIn.
  2. Subject ≀ 8 words β€” defense-desk humans skim by subject.
  3. No Friday / Saturday / Sunday β€” empirically lowest reply rate.
  4. Max 4 follow-ups β€” +24h / +72h / +7d / +30d. After Day 30 β†’ slow-cadence (1 email / quarter).
  5. "Not now" exit β€” every letter must include the line "please reply 'not now' and I'll come back in 90 days." This honours the buyer's time without burning the relationship.

6. THE CADENCE (when do we send each letter)

Week startingLettersVolume / wk
14 Jul3 academic letters (Bristol / Leeds / York β€” local + defence)3
21 Jul3 prime letters (BAE / QinetiQ / Thales β€” AUKUS-aligned)3
28 Jul3 standards-body letters (BSI / NCSC / UK AISI)3
4 Aug3 prime letters (Babcock / Atkins / Leidos)3
11 Aug3 academic letters (Oxford / Edinburgh / UCL)3
18 Aug3 standards-body letters (ICO / DSRB / NATO STO)3
25 Aug2 prime letters (Sopra Steria / CGI) + 2 academic (Cambridge / Imperial)4
1 Sep2 prime letters (Accenture / Deloitte) + 2 academic (Manchester / Sheffield)4

Total referral-partner-letter cohort: 27 letters across 7 weeks. Expected reply-rate: 35-50% from primes, 50-70% from academic, 20-35% from standards bodies. Conservative forecast: 11-15 referral partners by Q4 2026, leading to 2-4 MOD bid citations in Q4 2026 / Q1 2027.


7. THE TRACKING (every letter lands in the CRM)

Every referral-partner letter sent gets a record in the CRM per defoneos-mod-crm-tracking-pipeline.html:

buyer_id:        derived from LinkedIn handle
buyer_full_name:  named individual
buyer_role:       "Head of AI" / "Capture Lead" / "Standards Body Lead"
org_short:        BAE / QINETIQ / OXFORD / BSI / NCSC
tier:             T1A / T1B / T2 (per CRM tier scale)
state:            DISCOVER (initial send)
last_touch:       "sent referral-partner-letter v1.0 14 Jul 2026"
next_action:      "+24h follow-up nudge"
ask_1line:        "15-min call to discuss citing DEFONEOS in your next bid"
signal_score:     +5 (first-send) β†’ tracked per CRM rubric
deal_value_est:   Β£14.4k (8% sub-contract) OR Β£0 (academic) OR Β£0 (standards)
honesty_flag:     "pre-traction; sole-trader; sub-contractor under primes"

8. THE HONESTY REGISTER (what I will not pretend)

  1. We are not a UK prime. We are a sole-trader. We get paid via sub-contract from primes (Β£14.4k/yr per prime that cites us β€” capped at 8% of our Β£180k Platform price).
  2. "Academic advisory panel" is an aspiration, not a current state. We have 0 academics on it; we aim for 5 by Q3 2026 with Β£5k/yr honorarium.
  3. "Standards body endorsement" is also aspirational. We have 0 endorsements; we aim for 1 by Q4 2026 (most likely BSI via the ISO 42001 mirror pathway).
  4. The "no-fee no-royalty" offer to standards bodies is genuinely no-fee no-royalty. We make money on Platform + Deployment, not on the template.
  5. We will not promise the buyer / academic / standards body that we can deliver a contract in a specific timeframe. Sovereign AI OS wins come in 18-36 month cycles from first contact.

Hash: SHA-512 of this HTML signed in tick-62 + tick-63 SIGILs. Print as A4 portrait PDF for sending.
Sovereign. British. Audit-grade. Forever. πŸ‰