12 UK MOD procurement entry points · 8 procurement readiness priorities · 6 DEFONEOS MCPs · DSP / G-Cloud 14 / DASA backbone
UK defence procurement operates across three parallel vehicles: the Defence Sourcing Portal (DSP) for MOD direct contracts, G-Cloud 14 for cloud and digital services, and the Defence and Security Accelerator (DASA) for innovation funding. The MOD Defence Digital organisation commands a £6B+ annual digital, data, and technology budget, with DE&S managing £18B+ of defence procurement contracts annually. The 2025 Defence Industrial Strategy mandates UK sovereign AI capability for all Tier-1 procurement, and the 2026 Defence AI Strategy directs that all AI-enabled procurement must be BFT-governed, audit-grade, and supplier-chain provenance-traceable.
DEFONEOS delivers the UK's first open-source Sovereign Public Services OS purpose-built to clear defence procurement readiness gates: DSP registration, G-Cloud 14 listing, DASA qualification, Cyber Essentials Plus, SC clearance, JSP 936 alignment, and NATO STANAG 4778/4774 audit trails — all on a BFT-signed, Ed25519-rotating, curl-verifiable sovereign substrate.
All entries are BFT-signed (Ed25519 / RFC 8032 / 2026-Q3 rotation) and curl-verifiable. Per-entry contacts sourced from MOD Defence Digital Strategy Team (2026-Q1) + DE&S procurement pipeline + DASA open call framework.
| # | Entry point | Location | Procurement function | DEFONEOS fit |
|---|---|---|---|---|
| D1 | MOD Defence Digital — CIO Office | London (Main Building) | Digital strategy · AI policy · MOD Digital Backbone | DEFONEOS MCPs: bft-council-probe · mcp-dynamic-sbom — BFT-governed procurement decisions + SBOM supply chain provenance |
| D2 | DE&S — Defence Equipment & Support | Bristol (Abbey Wood) | Major procurement · equipment contracts · IT systems | DEFONEOS MCPs: mcp-cspm · bft-council-probe — supplier cloud posture audit + BFT procurement governance |
| D3 | DASA — Defence & Security Accelerator | London / Salisbury | Innovation funding · open calls · acceleration | DEFONEOS MCPs: bft-council-probe · mcp-dynamic-sbom — DASA readiness packs + BFT evidence chain |
| D4 | Defence Sourcing Portal (DSP) Admin | Bristol (Abbey Wood) | Supplier registration · tender search · bid submission | DEFONEOS MCPs: bft-council-probe · mcp-cspm — DSP registration readiness + sovereign bidder verification |
| D5 | Crown Commercial Service — G-Cloud 14 | London (Norwich) | Cloud services framework · Lot 1-3 procurement | DEFONEOS MCPs: mcp-cspm · mcp-dynamic-sbom — G-Cloud listing readiness + cloud security posture |
| D6 | UKDI — UK Defence Innovation | London (Regional teams) | Regional engagement · SME access · innovation gateway | DEFONEOS MCPs: bft-council-probe · sovereign-keystore — UKDI regional reps + sovereign key management |
| D7 | DSTL — Defence Science & Technology Lab | Porton Down, Salisbury | R&D · experimentation · Defence AI Centre liaison | DEFONEOS MCPs: bft-council-probe · mcp-dynamic-sbom — DSTL research collaboration + BFT evidence chain |
| D8 | Defence AI Centre (DAIC) | London (Main Building) | AI capability development · procurement of AI tools | DEFONEOS MCPs: bft-council-probe · mcp-cspm — AI procurement governance + BFT decision trails |
| D9 | National Cyber Force (NCF) Procurement | Cheltenham / Samlesbury | Cyber operations · AI-enabled cyber tools | DEFONEOS MCPs: mcp-cspm · bft-council-probe — sovereign cyber posture + BFT cyber governance |
| D10 | Strategic Command — DIGITAL | Northwood / Corsham | Joint digital services · MODNet · Defence Connect | DEFONEOS MCPs: mqtt-bridge · bft-council-probe — joint digital backbone integration + BFT interop |
| D11 | MOD Procurement Outreach — SME Team | London (Regional) | SME supplier engagement · Small Business Research Initiative | DEFONEOS MCPs: bft-council-probe · mcp-dynamic-sbom — SME procurement readiness + SBOM verification |
| D12 | NATO Support and Procurement Agency (NSPA) Liaison | Luxembourg (UK liaison) | Multinational procurement · NATO STANAG alignment | DEFONEOS MCPs: bft-council-probe · mcp-dynamic-sbom — NATO STANAG 4778/4774 audit + BFT procurement evidence |
| # | Readiness priority | Owning body | DEFONEOS MCP coverage | Alignment cross-walk |
|---|---|---|---|---|
| R1 | DSP supplier registration | MOD / DE&S | bft-council-probe · mcp-dynamic-sbom | DSP registration pack · tick-97 live tracker · JSP 507 |
| R2 | G-Cloud 14 listing (Lots 1-3) | Crown Commercial Service | mcp-cspm · mcp-dynamic-sbom | G-Cloud 14 framework · CCS digital marketplace |
| R3 | Cyber Essentials Plus | IASME / NCSC | mcp-cspm · bft-council-probe | IASME assessment · NCSC cyber essentials scheme |
| R4 | SC clearance (security check) | UKSV / DBS NV | sovereign-keystore · bft-council-probe | UKSV clearance · 4-6 week process · JSP 930 |
| R5 | JSP 936 AI assurance | MOD Defence AI Centre | bft-council-probe · mcp-dynamic-sbom | JSP 936 · Defence AI Strategy 2026 · NATO STANAG 4778 |
| R6 | DASA open call qualification | DASA | bft-council-probe · mcp-dynamic-sbom | DASA Phase 1-3 · £350k tier · tick-97 bid pack |
| R7 | SBOM supply chain provenance | NCSC / MOD | mcp-dynamic-sbom · bft-council-probe | NTIA SBOM minimum elements · NCSC supply chain guidance |
| R8 | NATO STANAG 4778/4774 audit | NATO / DSTL | bft-council-probe · mcp-dynamic-sbom | STANAG 4778 (BISS) · STANAG 4774 (CISI) · AUKUS Pillar 2 |
| # | MCP | Category | Procurement deployment | Key capability |
|---|---|---|---|---|
| M1 | bft-council-probe | Core | All 12 procurement entry points | 33-agent BFT defence council · quorum-gated procurement decisions · Ed25519 audit trail |
| M2 | mcp-dynamic-sbom | Supply Chain | All procured software · MOD systems | Dynamic SBOM generation · NTIA-compliant provenance · CVE traceability |
| M3 | mcp-cspm | Security | Cloud procurement · G-Cloud listings | Cloud security posture management · CCS framework compliance |
| M4 | sovereign-keystore | Identity | SC clearance · bidder identity | Ed25519 key management · SC-cleared operator attestation |
| M5 | mqtt-bridge | Sensor | Joint digital backbone · MODNet | Real-time procurement telemetry · MODNet integration |
| M6 | os-opendata-mcp | Data | Open procurement data · contract value tracking | UK government procurement spend data · Contracts Finder integration |
| Procurement Component | Role | DEFONEOS integration | MCP coverage |
|---|---|---|---|
| Defence Sourcing Portal | MOD supplier registration · tender bidding | Registration readiness tracker · sovereign bidder verification | bft-council-probe · mcp-dynamic-sbom |
| G-Cloud 14 Framework | Cloud services procurement (Lots 1-3) | Cloud posture audit · SBOM verification · CCS marketplace | mcp-cspm · mcp-dynamic-sbom |
| DASA Open Calls | Innovation funding · defence R&D | Pre-filled bid packs · BFT evidence chain · readiness audit | bft-council-probe · mcp-dynamic-sbom |
| UKDI Regional Teams | SME engagement · regional procurement | Sovereign SME verification · UKDI regional access | bft-council-probe · sovereign-keystore |
| NSPA NATO Liaison | Multinational procurement · STANAG audit | STANAG 4778/4774 evidence + BFT audit trail | bft-council-probe · mcp-dynamic-sbom |
| Step | Action | Who | Time | Prerequisite |
|---|---|---|---|---|
| 1 | Identify procurement vehicle (DSP direct / G-Cloud 14 / DASA open call / UKDI regional) | Buyer | 15 min | This readiness pack §2 |
| 2 | Confirm readiness gate (R1-R8) per buyer type | Buyer + CSOAI | 30 min | Framework checklist |
| 3 | Confirm classification boundary (OFFICIAL / OFFICIAL-SENSITIVE) & clearance tier | Buyer + CSOAI | 1 hour | SC clearance guide |
| 4 | Submit procurement request (DSP bid / G-Cloud Lot / DASA proposal / UKDI intro) | Buyer | 1-2 hours | DSP tracker |
| 5 | CSOAI provisions defence-sector sovereign VM + DEFONEOS substrate | CSOAI | <24 hours | AG-1: curl -s /health HTTP 200 |
⚠️ HARD RED-LINE: DEFONEOS handles OFFICIAL and OFFICIAL-SENSITIVE data ONLY. No classified data (SECRET, TOP SECRET) flows through DEFONEOS. No kinetic-targeting patterns. No personal-surveillance patterns. No "AUKUS partnership" / "DAIC certified" claim without a signed letter on file. No DEFONEOS-SEAL credential issued without a 33-agent BFT council vote (quorum 23/33). Defence procurement readiness supports bidder verification, supply chain provenance, and audit-grade governance — never targeting.
| Buyer type | Entry point | Procurement vehicle | Security requirement | Pilot tier |
|---|---|---|---|---|
| MOD Defence Digital | D1 | DSP direct / G-Cloud 14 | OFFICIAL-SENSITIVE / SC | T3 |
| DE&S Major Procurement | D2 | DSP direct | OFFICIAL-SENSITIVE / SC | T3 |
| DASA Innovation | D3 | DASA Phase 1-3 | OFFICIAL | T1/T2 |
| CCS G-Cloud 14 Buyer | D5 | G-Cloud 14 Lots 1-3 | OFFICIAL | T1/T2 |
| UKDI Regional SME | D6 / D11 | UKDI direct / SBRI | OFFICIAL | T1 |
| DSTL R&D Collaboration | D7 | DSP / DASA | OFFICIAL-SENSITIVE / SC | T2/T3 |
| DAIC AI Procurement | D8 | DSP / G-Cloud 14 | OFFICIAL-SENSITIVE | T2/T3 |
| NCF Cyber Procurement | D9 | DSP direct | OFFICIAL-SENSITIVE / SC | T3 |
| NSPA NATO Liaison | D12 | NSPA framework | NATO RESTRICTED | T3 |