1. The release rule
Each check is green only when a deterministic probe or signed receipt supports it. Three states: VERIFIED (local matches live), OWNER-GATED (needs Nick's information, signature, or send-button), BLOCKED (red-line or integrity). DEFERRED is designed-but-not-represented-as-operational.
2. Twelve-check release matrix
| # | Check | Evidence | State |
|---|---|---|---|
| 01 | Canonical edge | GET / and /defoneos.html return HTTP 200 | VERIFIED |
| 02 | Alias integrity | www.csoai.org serves current static deployment | VERIFIED |
| 03 | Sitemap parity | Sitemap URL count = local release manifest | VERIFIED |
| 04 | Baseline pages | 500+ baseline pages present | VERIFIED |
| 05 | Tick-110/111 pages | Tick pages have local byte counts + SIGILs | VERIFIED |
| 06 | SIGIL receipt | tick-110 + tick-111 sigils live and readable | VERIFIED |
| 07 | MCP inventory | 30/30 preserved in sprint state | VERIFIED |
| 08 | P0 repo target | 15/15 preserved in sprint state | VERIFIED |
| 09 | Owner gates | DSP/CE/SC/DASA/NATO DIANA/UKDI/UK AISI/PyPI remain explicit gates | OWNER-GATED |
| 10 | Red-line audit | No kinetic targeting / personal surveillance / trap domain / unsupported partnership claim | VERIFIED |
| 11 | Rollback path | Previous SIGIL + sitemap backup + static-only deployment recovery | VERIFIED |
| 12 | Buyer walk-through | Evidence index + operator handbook link from launch surface | VERIFIED |
3. Five-stage soft-launch sequence
- Freeze — record filenames, bytes and SHA-256 for tick-110/111 pages
- Deploy — Vercel production with api/ absent from static root
- Alias — point www.csoai.org + csoai.org at ready deployment
- Probe — curl every new page, tick receipt, root, and sitemap
- Walk-through — open evidence index + operator handbook + owner-gate list
4. Governance + human authority
DEFONEOS uses a 33-seat BFT governance model with human-owner veto + safe-state invariant. Page publication is not a SEAL issuance and does not constitute a council vote. Review pattern: 28 approve / 5 amend / 0 reject (quorum 25/33).
| Decision | Threshold | Human rule |
|---|---|---|
| Routine policy change | 23/33 | Owner can pause before execution |
| Emergency proposal | 17/33 | Safe-state first; no red-line exception |
| High-impact lockdown | 27/33 | Human witness required for restoration |
| DEFONEOS-SEAL issuance | 33-agent council, 23/33 quorum | Not issued by this tick |
| External outreach | Nick's explicit send action | Draft only until sent by owner |
5. Compliance cross-walk
- UK GDPR Arts 28, 32 — ring separation, mTLS, key rotation, access-token procedures
- UK GDPR Art 33 + NCSC IR guidance — 7-phase IR runbook + SIGIL incident receipts
- NCSC CAF B3 + C1 — threat, recovery, supply-chain, edge integrity specs
- DSP SC2 + JSP 440 + JSP 936 — procurement gate + evidence index + operator controls
- EU AI Act Arts 9, 50 + ISO 42001 — risk register + disclosure boundary + governance receipts
- ISO 27001:2022 + NIST SP 800-53r5 — control mappings with named owners + verification commands
6. Owner-gated actions: not silently automated
Materials are prepared. The owner action is identified. No submission is represented as made.
- DSP — registration live tracker ready · owner to submit
- Cyber Essentials — application notes ready · assessor interaction pending
- UK SC — clearance guide ready · personal details pending
- DASA / NATO DIANA / UKDI — application and outreach packs ready · owner to send
- PyPI — package metadata ready · token required
7. Rollback & recovery contract
Static project deploys without api/ so Vercel does not auto-detect a framework shell. Each tick receipt records artefacts + bytes + hashes + red-line status. If a page returns 404, freeze claims, check alias target, verify deployment ready, re-run byte comparison.
8. Buyer walk-through acceptance
A buyer should answer 4 questions in under 10 minutes: what does DEFONEOS do, where is the evidence, who can approve a material action, what remains owner-gated? The evidence index answers 1-2, the public operator handbook answers 3, this checklist answers 4.
- Open sovereign-buyer-evidence-index.html
- Open defoneos-public-operator-handbook.html
- Verify the live tick-111 SIGIL receipt
- Escalate owner-gated submissions only to Nick