The UK's sovereign AI contribution to the AustraliaβUnited KingdomβUnited States trilateral security partnership. Open source. Interoperable. Sovereign by design.
AUKUS is a trilateral security partnership announced on 15 September 2021 between Australia, the United Kingdom, and the United States. It has two pillars:
| # | Pillar II Area | DEFONEOS Capability | Coverage |
|---|---|---|---|
| 1 | AI & Autonomy | 30 MCP servers, SOV3 with 188+ AI tools, bio-cyber swarm engine, Mava multi-agent framework, OLM organic learning model | FULL |
| 2 | Quantum | Post-quantum cryptography (ML-KEM-768 Kyber, ML-DSA-65 Dilithium) already live in DORADO. Quantum domain planned Q1 2027. VQE + QAOA + Grover search in research pipeline. | PARTIAL |
| 3 | Undersea | Maritime domain with 8 sensor systems: AIS tracking, bathymetry, oceanographic data, sonar analysis pipeline. ArduSub + MOOS-IvP for autonomous underwater vehicle (AUV) control. | STRONG |
| 4 | Hypersonics | Simulation capability in SOV SPACE (5D digital twin). Trajectory modelling, thermal signature analysis, interceptor optimisation. Not offensive β test and evaluation support. | PARTIAL |
| 5 | Cyber | Cyber domain with 12 systems: Caldera adversary emulation, PentestGPT, OWASP LLM Top 10 scanner, Morris-II worm defence, DORADO sovereign security operations centre (SOC). | FULL |
| 6 | Electronic Warfare | EW domain with 8 systems: GNU Radio SDR, virtual Cognitive EW (vCEW), spectrum awareness, RF fingerprinting. Air-gapped mode for classified environments. | STRONG |
| 7 | Innovation & Info-Sharing | Open source Apache 2.0 = instant trilateral sharing. A2A protocol for cross-partner federation. Git-based collaboration. No vendor lock-in. | FULL |
| 8 | Deterrence | DEFONEOS red lines enforced: no autonomous lethal targeting, no mass surveillance, no kinetic strike packages. Human-in-the-loop governance via 33-agent BFT council. This IS deterrence-by-design. | FULL |
AUKUS Pillar II requires rapid technology sharing between Australia, UK, and US. Traditional defence procurement takes 5β10 years to clear export controls for each technology transfer. Open source eliminates this: the base DEFONEOS platform is Apache 2.0 licensed. Any AUKUS partner can deploy their own instance today. No export licence required. No ITAR restrictions on the open-source base.
Each partner then deploys their classified extensions on top β those stay sovereign. The sharing is at the platform level, not the data level.
Each AUKUS partner runs its own DEFONEOS instance on its own sovereign soil:
| Partner | Deployment | Sovereignty |
|---|---|---|
| π¬π§ UK | CSOAI GCP London + on-prem M4 Mac cluster | Full UK sovereignty. UK Companies House 16939677. UK data residency. |
| π¦πΊ AU | Australian-hosted GCP/ AWS ap-southeast-2 | Full Australian sovereignty. ASD-accredited cloud when required. |
| πΊπΈ US | US-hosted: AWS GovCloud, Azure Government, on-prem | Full US sovereignty. CLOUD Act applies but data is US-side. |
No shared cloud. No single point of failure. No vendor controlling all three instances. Sovereignty preserved at the infrastructure layer.
DEFONEOS instances across AUKUS partners communicate via the Agent-to-Agent (A2A) protocol β a W3C-standardised JSON-LD agent card format. This allows:
# A2A federation between AUKUS partners
{
"agent_url": "https://defoneos.au.defence.gov.au",
"message": "Request maritime ISR update for Arafura Sea sector 7",
"skill_id": "aisstream-maritime-mcp",
"arguments": {"sector": "arafura-7", "timeframe": "last_24h"}
}
# Australian instance responds with SIGIL-signed data:
{
"status": "completed",
"result": {"vessels_detected": 47, "anomalies": 3},
"sigil": "au-asd-7f3a...ed25519-signed"
}
DEFONEOS is British-built, British-owned, British-governed. Unlike Palantir (US-owned, subject to US CLOUD Act, In-Q-Tel funded), DEFONEOS is:
This makes DEFONEOS the UK's sovereign AI contribution to AUKUS β not re-skinned American technology, but a genuinely British platform that partners can trust.
| Programme | Funder | Amount | DEFONEOS Fit |
|---|---|---|---|
| AUKUS Innovation Challenge | Trilateral (UK MOD + US DoD + AU DSTG) | Β£5β25M per project | Open-source AI/autonomy platform |
| DASA (Defence & Security Accelerator) | UK MOD | Β£50KβΒ£2M | β Draft application ready |
| NATO DIANA (dual-use) | NATO | β¬100Kββ¬500K | β Draft application ready |
| Innovate UK | UKRI | Β£100KβΒ£5M | AI sovereignty research |
| DSTG (Defence Science & Technology Group) | Australia | A$1β10M | Trilateral AI trial partner |
| DIU (Defence Innovation Unit) | US DoD | $1β10M | Pilot deployment (US instance) |
| ARPA-H / DARPA AI | US | $5β50M | Quantum + AI autonomy research |
π¬π§ UK INSTANCE (csoai.org) πΊπΈ US INSTANCE (gov instance) π¦πΊ AU INSTANCE (defence.gov.au)
βββββββββββββββββββββββββββ βββββββββββββββββββββββββββ βββββββββββββββββββββββββββ
β SOV3 Hub :3101 ββββA2AβββΊβ SOV3 Hub :3101 ββββA2AβββΊβ SOV3 Hub :3101 β
β BFT Council :3200 β SIGIL β BFT Council :3200 β SIGIL β BFT Council :3200 β
β 30 MCPs + OLM β chain β 30 MCPs + OLM β chain β 30 MCPs + OLM β
β M4 Mac edge cluster β xchain β AWS GovCloud β xchain β AWS ap-southeast-2 β
β Yorkshire digital twin β β Pacific digital twin β β Indo-Pacific twin β
βββββββββββββββββββββββββββ βββββββββββββββββββββββββββ βββββββββββββββββββββββββββ
β β β
βββββββββββββββ Bitcoin anchor (OP_RETURN shared) ββββββββββββββββββββββββββ
Immutable trilateral audit trail. No one nation can rewrite history.
| Standard | DEFONEOS Implementation | Status |
|---|---|---|
| Link 22 (tactical data link) | Planned β MQTT bridge MCP adapter | Q4 2026 |
| VMF (Variable Message Format) | JSON β VMF translation layer planned | Q1 2027 |
| STANAG 5516 (Link 16) | Read-only monitoring via tactical-mcp | Q1 2027 |
| MIDS-JTRS | Not planned (hardware-dependent) | N/A |
| C2SIM (C2 Simulation Interoperability) | Cesium digital twin uses C2SIM for exercise integration | Live |
| JC3IEDM (Joint C3 Information Exchange Data Model) | Planned β PostgreSQL schema adapter | Q4 2026 |
| A2A (Agent-to-Agent) | W3C JSON-LD agent card β live | LIVE |
| MCP (Model Context Protocol) | 30 MCP servers β live | LIVE |
The core DEFONEOS platform β all 30 MCP servers, the SOV3 hub, the BFT council, the SIGIL chain β is published under Apache 2.0. This means:
Each partner builds their own classified extensions on top of the open-source base. These are not shared β they stay sovereign. Examples:
The sharing happens at the platform and protocol layer. The secrets stay home.
| Quarter | Milestone | Status |
|---|---|---|
| Q3 2026 (now) | DEFONEOS v1.0 β 30 MCPs, 186+ pages, BFT governance live. Open source. Ready for AUKUS partner trials. | LIVE |
| Q4 2026 | First AUKUS partner trial (target: DSTG Australia or DIU US). JC3IEDM adapter. Link 22 monitoring. | Planned |
| Q1 2027 | Trilateral exercise integration (C2SIM). VMF translation layer. STANAG 5516 read. Quantum PQC fully rolled out. | Planned |
| Q2 2027 | AUKUS Innovation Challenge submission. Joint US-UK-AU DEFONEOS deployment for a regional exercise. | Planned |
| Q3 2027 | Full trilateral operational capability. DEFONEOS deployed across all three partners with federated A2A governance. | Vision |
| Factor | DEFONEOS | Palantir Gotham | Anduril Lattice |
|---|---|---|---|
| Ownership | π¬π§ UK (CSOAI Ltd) | πΊπΈ US (In-Q-Tel backed) | πΊπΈ US (VC backed) |
| Open Source | β Apache 2.0 base | β Closed | β Closed |
| AUKUS Sharing Speed | Instant (open source) | Monthsβyears (export clearance) | Monthsβyears |
| Trilateral Deployment | 3 sovereign instances + A2A | Centralised US cloud | US-based cloud |
| CLOUD Act Risk | β UK instance exempt | β Subject to US data requests | β Subject to US data requests |
| Price per Partner | Β£0 (open source) + support | Β£50β100M+ per partner | Β£10β50M per partner |
| AI Governance | 33-agent BFT council, Ed25519 SIGIL | Vendor-controlled | Vendor-controlled |
| Export Licence | None needed (open source) | Required per partner | Required per partner |
| Gate | What's Needed | Blocking? |
|---|---|---|
| Register on Defence Sourcing Portal | Nick's email + company details | π΄ Yes β cannot bid without it |
| Cyber Essentials certification | Β£320β600, company info, 1β2 weeks | π΄ Yes β mandatory for MOD contracts |
| UK SC clearance | Nick's personal details, 4β6 weeks | π‘ For classified work only |
| AUKUS partner outreach | Email to DSTG / DIU contacts (Nick must press send) | π‘ Drafts ready |